Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
20-10-2024 09:19
General
-
Target
setup3.exe
-
Size
367KB
-
MD5
8f7e3fa4b507ef8114bd09c4c39b40ab
-
SHA1
79024e1bb20fa1d46b7b135c230010c2720d57e6
-
SHA256
44b1d6e0cc054e581350739403e2c9b99e5758bd3da8b10cd087626272d71e91
-
SHA512
88249e6c3dac9f08988772e1e6ff6a9703772c164001680865cff43f87531c358b6e6797ee329fb7a7c2f4af5b8aacc52d57f3503dfbc00ab228548be21a6d84
-
SSDEEP
6144:iJlLY7RbNJFm5JHdf2x/B+Q+FzLk41BFGMtwx+7sVUIHf:ircRbAOx5+/FfkXOG
Score
10/10
Malware Config
Extracted
Family
smokeloader
Botnet
pub3
Signatures
-
SmokeLoader
Modular backdoor trojan in use since 2014.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\setup3.exe"C:\Users\Admin\AppData\Local\Temp\setup3.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
172KB
-
Filesize
44KB
-
Filesize
44KB
-
Filesize
44KB
-
Filesize
420KB
-
Filesize
172KB
-
Filesize
44KB