Analysis

  • max time kernel
    13s
  • max time network
    19s
  • platform
    windows7_x64
  • resource
    win7-20241010-en
  • resource tags

    arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
  • submitted
    04/11/2024, 00:58

General

  • Target

    2e4ab34dcfd40afc19f0f3ec171f78b1362dbace975891fec296e60e1ac127a6.exe

  • Size

    372KB

  • MD5

    6710868911ac883292da39b8f0208505

  • SHA1

    8f72a0fe8495a84036216e18eb302cc53cd5a285

  • SHA256

    2e4ab34dcfd40afc19f0f3ec171f78b1362dbace975891fec296e60e1ac127a6

  • SHA512

    2b043a912acbaa3441d473c8c6d491058499303bbb713a93ded60652a3322cd506517c280d053235c27dcc56e32bf9dc9642e5e7aeafb906d27119c48c8fd9b3

  • SSDEEP

    6144:Zw2LmWVeVpo6/1nQQnJ6eFUl7drxvLi4+mPyabnT:Zw21VeVp9nQeJ6yapxvLdhyav

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\2e4ab34dcfd40afc19f0f3ec171f78b1362dbace975891fec296e60e1ac127a6.exe
    "C:\Users\Admin\AppData\Local\Temp\2e4ab34dcfd40afc19f0f3ec171f78b1362dbace975891fec296e60e1ac127a6.exe"
    1⤵
      PID:2236

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2236-1-0x0000000000260000-0x000000000026B000-memory.dmp

      Filesize

      44KB

    • memory/2236-0-0x0000000000220000-0x000000000024B000-memory.dmp

      Filesize

      172KB

    • memory/2236-2-0x0000000000400000-0x000000000040B000-memory.dmp

      Filesize

      44KB

    • memory/2236-3-0x0000000000400000-0x0000000000467000-memory.dmp

      Filesize

      412KB

    • memory/2236-6-0x0000000000400000-0x000000000040B000-memory.dmp

      Filesize

      44KB

    • memory/2236-5-0x0000000000220000-0x000000000024B000-memory.dmp

      Filesize

      172KB

    • memory/2236-4-0x0000000000260000-0x000000000026B000-memory.dmp

      Filesize

      44KB