Analysis

  • max time kernel
    121s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240319-en
  • resource tags

    arch:x64arch:x86image:win7-20240319-enlocale:en-usos:windows7-x64system
  • submitted
    17-04-2024 14:24

General

  • Target

    4b06c62c07429d0bbc7f9126a18c2e959e5c52c09236dbfb5b16a09390f0a300.exe

  • Size

    288KB

  • MD5

    e88da5d3f528d78eabc2de83797c2195

  • SHA1

    7937c0b3fac48fa50aa74e80387a6ff6f463c978

  • SHA256

    4b06c62c07429d0bbc7f9126a18c2e959e5c52c09236dbfb5b16a09390f0a300

  • SHA512

    4dfb673cfab033d7d40ef383ef36841d3c8fd1a1f2c80bfd05c896aa3d9c38c08301d89e4543e9b300a44787c9a57a13e34654f5374d6788c1e56e37c69be9a9

  • SSDEEP

    3072:OziRfFi3WzI2OfoyFIUVvBmAx0H3q0eJ5cLw5p0s0hQUxaIa2VM:/RfFDG3FJVvtyeJ5JKQUxaIh

Malware Config

Extracted

Family

smokeloader

Botnet

pub3

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\4b06c62c07429d0bbc7f9126a18c2e959e5c52c09236dbfb5b16a09390f0a300.exe
    "C:\Users\Admin\AppData\Local\Temp\4b06c62c07429d0bbc7f9126a18c2e959e5c52c09236dbfb5b16a09390f0a300.exe"
    1⤵
      PID:1728

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1728-2-0x0000000002D60000-0x0000000002E60000-memory.dmp
      Filesize

      1024KB

    • memory/1728-3-0x0000000000220000-0x000000000022B000-memory.dmp
      Filesize

      44KB

    • memory/1728-4-0x0000000000400000-0x0000000002BF5000-memory.dmp
      Filesize

      40.0MB