Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    01-11-2024 21:37

General

  • Target

    file.exe

  • Size

    214KB

  • MD5

    0e0cfe7e42cf47bd12e769993d692283

  • SHA1

    60e246894470f16d4aede73b2c2e05ee9ec7dbef

  • SHA256

    58bded444fa5ac1c5d9bc34b6e155667d088f089d50923fc759162a6e9ad1e4d

  • SHA512

    a0631d8b3fa5dd1b9b71e96d735360059f12db6e479424d3b9974f56b5ff99c75450294d22e861f0a292644f624938681a9f5ea5b363d5a10c8725895fae7200

  • SSDEEP

    1536:TAOv0+WJzlN3vzO1APP+vOz6K3rn7LOFLdllav/Y8BLKYS50541CZD8HjTqKAX++:TyDvC1u+vOGY2LdnlYS505U7AOiMs

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\file.exe
    "C:\Users\Admin\AppData\Local\Temp\file.exe"
    1⤵
      PID:628

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/628-1-0x0000000002C70000-0x0000000002D70000-memory.dmp

      Filesize

      1024KB

    • memory/628-3-0x0000000000400000-0x000000000040B000-memory.dmp

      Filesize

      44KB

    • memory/628-4-0x0000000000400000-0x0000000002B39000-memory.dmp

      Filesize

      39.2MB

    • memory/628-5-0x0000000000400000-0x0000000002B39000-memory.dmp

      Filesize

      39.2MB