Overview

overview

10

Static

static

10

Smooth - Software.exe

windows7-x64

7

Smooth - Software.exe

windows10-2004-x64

9

discord_to...er.pyc

windows7-x64

3

discord_to...er.pyc

windows10-2004-x64

3

get_cookies.pyc

windows7-x64

3

get_cookies.pyc

windows10-2004-x64

3

misc.pyc

windows7-x64

3

misc.pyc

windows10-2004-x64

3

passwords_grabber.pyc

windows7-x64

3

passwords_grabber.pyc

windows10-2004-x64

3

source_prepared.pyc

windows7-x64

3

source_prepared.pyc

windows10-2004-x64

3

Resubmissions

12-08-2024 16:01

240812-tgbw8sybrk 10

12-08-2024 15:48

240812-s9adfasdjc 10

12-08-2024 15:43

240812-s56abaxfnm 10

12-08-2024 15:37

240812-s2n7maxdrr 10

12-08-2024 15:33

240812-szev6s1hnf 10

Analysis

  • max time kernel
    122s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240729-en
  • resource tags

    arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
  • submitted
    12-08-2024 15:33

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Smooth - Software.exe

  • Size

    80.9MB

  • MD5

    b6c47213cfac07d4c04097bc45b569c3

  • SHA1

    ab02e5b73aa50e6b17d9cc2223bfce9950149225

  • SHA256

    519ad11288a07081daec0243750492d5b4333ebbd772b5ac5123d487e8aff031

  • SHA512

    0aa843ca64bec91f9bedd9c2d1c0da8eaa33dd20a3b8e65af13e694f575972581d6dbcece26d1b1e31f8172857ec83fb71cba1969ab055db30266f30accc7c3b

  • SSDEEP

    1572864:5vxZQglV3mWO7vaSk8IpG7V+VPhqCMNE7TlgHtqiYgj+h58sMwD9KCmcJzi:5vxZxfWXeSkB05awCMkeNE5X9K2i

Score
7/10
upx

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Smooth - Software.exe
    "C:\Users\Admin\AppData\Local\Temp\Smooth - Software.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:3068
    • C:\Users\Admin\AppData\Local\Temp\Smooth - Software.exe
      "C:\Users\Admin\AppData\Local\Temp\Smooth - Software.exe"
      2⤵
      • Loads dropped DLL
      PID:2996

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\_MEI30682\python311.dll
    Filesize

    1.6MB

    MD5

    ffd85743633296368dcc81c9ff0e8554

    SHA1

    ccf28c70bbf853dbd6cd258f59836f25774f1c34

    SHA256

    286483910be593ce685c0377463aa3250528fa22a08e1d38e831659ed81f12c1

    SHA512

    65b9baaf31abd0a71571c6567290fea86b986c6dba2f747cd24158226ef4a32af37ccf4ea461658c5822fda9de1525d8f4e19ed473c349c6d2db664d8d4c2b07

    Download Submit

  • memory/2996-1261-0x000007FEF62A0000-0x000007FEF6889000-memory.dmp

    Filesize

    5.9MB

    Download