Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
-
submitted
28/08/2024, 15:01
General
-
Target
setup2.exe
-
Size
227KB
-
MD5
0f11d18a5a7c0ec929e6afec9d39e9fd
-
SHA1
d1b0177a323a00e0c83769e25b7d9a5cc651c282
-
SHA256
5fca3f761720e032add8169fe99c64d9de874db06d5994c4f124de98d2af4d35
-
SHA512
cec2f196f898b5060877c31abc874fd4e08b096c592dc5abc6ef57a4de20c2e8d1f66024dd4b5f12ef85da208112685db5bbf77828f1bc0b09c7eb4f7f84b916
-
SSDEEP
3072:5dHfJpRiwr7B0dlrMgqYwLP9KSzylmU2JsHhp:5dHfJpRiwnOdl4gwDUkyzYs
Score
10/10
Malware Config
Extracted
Family
smokeloader
Botnet
pub2
Signatures
-
SmokeLoader
Modular backdoor trojan in use since 2014.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\setup2.exe"C:\Users\Admin\AppData\Local\Temp\setup2.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1024KB
-
Filesize
248KB
-
Filesize
44KB