Overview

overview

10

Static

static

3

winprofile

windows7-x64

10

winprofile

windows10-1703-x64

10

Analysis

  • max time kernel
    120s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240319-en
  • resource tags

    arch:x64arch:x86image:win7-20240319-enlocale:en-usos:windows7-x64system
  • submitted
    08-04-2024 05:33

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    86b7039a7dfc15406055549ccb7d3d37595427ef6f5b384c8c7f0232bd8ac0c7.exe

  • Size

    286KB

  • MD5

    ce0fbb19c12cd60d7ce803fa5795184f

  • SHA1

    6d58532de6c591dcbe29b4cd89be83ff5af710e9

  • SHA256

    86b7039a7dfc15406055549ccb7d3d37595427ef6f5b384c8c7f0232bd8ac0c7

  • SHA512

    7ff490be42f7b192676bc1e2e95229ebe3ecfc005d42934c9b524732be0f41aab71f0858d941ac9a1787d2a67670649dc9f3679253c0365272b005261069004e

  • SSDEEP

    3072:m4b8sRmT66Mbf0izcJDGrFU88LM1yxOvoJFHrbt1YWCpBt:mg8sRm+TnmWRUOwnLz8X

Score
10/10
smokeloaderpub3backdoortrojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub3

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\86b7039a7dfc15406055549ccb7d3d37595427ef6f5b384c8c7f0232bd8ac0c7.exe
    "C:\Users\Admin\AppData\Local\Temp\86b7039a7dfc15406055549ccb7d3d37595427ef6f5b384c8c7f0232bd8ac0c7.exe"
    1⤵
      PID:1684

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1684-1-0x0000000002D50000-0x0000000002E50000-memory.dmp
      Filesize

      1024KB

      Download
    • memory/1684-3-0x0000000000230000-0x000000000023B000-memory.dmp
      Filesize

      44KB

      Download
    • memory/1684-4-0x0000000000400000-0x0000000002B71000-memory.dmp
      Filesize

      39.4MB

      Download