Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    22-06-2024 06:33

General

  • Target

    b59e52b83b0a0cde0085b3ba306316a86a845a974cbeaf45da905476b6db53bb_dump.exe

  • Size

    40KB

  • MD5

    b4aa2b5e8f460a5b2731d538f5f7a0a7

  • SHA1

    46084497cdde44312db2c86da72d0e932b4ac169

  • SHA256

    1ab2666172b3ad1123fafce0a407cf1b1cff9f32ef124d431bfa69e921219e38

  • SHA512

    87e678534d3beef2c65b85b9db5a5742b86439349c3ea9cb4dbd361b0c303ae17f6c7dc243257b39dc5bd3c443ba11f3d1f9e831b071fe07828898cf08a1655f

  • SSDEEP

    768:xLtE5GK+qS4tpITHhRx3kwfOX5VAEMiyQjEDlrSlV:fE5Grt48THhRhfOX7AtZDJS/

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\b59e52b83b0a0cde0085b3ba306316a86a845a974cbeaf45da905476b6db53bb_dump.exe
    "C:\Users\Admin\AppData\Local\Temp\b59e52b83b0a0cde0085b3ba306316a86a845a974cbeaf45da905476b6db53bb_dump.exe"
    1⤵
      PID:2180

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2180-0-0x0000000000400000-0x000000000040B000-memory.dmp
      Filesize

      44KB