Analysis

  • max time kernel
    120s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    04/11/2024, 00:53

General

  • Target

    2e4ab34dcfd40afc19f0f3ec171f78b1362dbace975891fec296e60e1ac127a6.exe

  • Size

    372KB

  • MD5

    6710868911ac883292da39b8f0208505

  • SHA1

    8f72a0fe8495a84036216e18eb302cc53cd5a285

  • SHA256

    2e4ab34dcfd40afc19f0f3ec171f78b1362dbace975891fec296e60e1ac127a6

  • SHA512

    2b043a912acbaa3441d473c8c6d491058499303bbb713a93ded60652a3322cd506517c280d053235c27dcc56e32bf9dc9642e5e7aeafb906d27119c48c8fd9b3

  • SSDEEP

    6144:Zw2LmWVeVpo6/1nQQnJ6eFUl7drxvLi4+mPyabnT:Zw21VeVp9nQeJ6yapxvLdhyav

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\2e4ab34dcfd40afc19f0f3ec171f78b1362dbace975891fec296e60e1ac127a6.exe
    "C:\Users\Admin\AppData\Local\Temp\2e4ab34dcfd40afc19f0f3ec171f78b1362dbace975891fec296e60e1ac127a6.exe"
    1⤵
      PID:2556

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2556-2-0x0000000000400000-0x000000000040B000-memory.dmp

      Filesize

      44KB

    • memory/2556-1-0x0000000000250000-0x000000000025B000-memory.dmp

      Filesize

      44KB

    • memory/2556-0-0x0000000000220000-0x000000000024B000-memory.dmp

      Filesize

      172KB

    • memory/2556-3-0x0000000000400000-0x0000000000467000-memory.dmp

      Filesize

      412KB

    • memory/2556-4-0x0000000000250000-0x000000000025B000-memory.dmp

      Filesize

      44KB

    • memory/2556-5-0x0000000000220000-0x000000000024B000-memory.dmp

      Filesize

      172KB

    • memory/2556-6-0x0000000000400000-0x000000000040B000-memory.dmp

      Filesize

      44KB