Behavioral task
behavioral1
Sample
3nz83wD.exe
Resource
win7-20231023-en
amadeydcratpovertystealerraccoonredlinesectopratsmokeloaderzgrat6a6a005b9aa778f606280c5fa24ae595@ytlogsbotgromekinzapixelnewbackdoorcollectiondiscoveryevasioninfostealerpersistenceratspywarestealertrojan
44 signatures
300 seconds
General
-
Target
3nz83wD.exe
-
Size
30KB
-
MD5
ab8178ffad0530f4b0fffff2421d4e60
-
SHA1
63c1826ab15511ddb24d22b9db45a9d21c08e22b
-
SHA256
a3b2d1d567cbe1f9248e90b98fec55fc2f74e0553f5f222c1fc0a37d6ada7916
-
SHA512
b4aafeae10b13cc047c30bcffe5b242e4119578667b64b95f189998218d931cde311282e403f4dc1bcb45368aa5ae9813103767f33b8807e28d4a19d6721af01
-
SSDEEP
384:K9VD6tee+qUOTd2opQTLAdz1SvNmhpdvOjT7PbA6HBiTSnjxZMdP05ldpRMaYIBI:k6Qe+qUv8zcqdvOXA6XkPslJvGaVW
Score
10/10
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3nz83wD.exe
Files
-
3nz83wD.exe.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE