Analysis

  • max time kernel
    121s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    07-11-2024 08:21

General

  • Target

    6df560b101c7dc445d569b90cac73ef8d3699ecf24581fd775017757167cdbfa.exe

  • Size

    250KB

  • MD5

    4ccdd349272d1c627a1c4c18e3a470d6

  • SHA1

    dc9e8cac54533d163116aaa501b4722688b18de1

  • SHA256

    6df560b101c7dc445d569b90cac73ef8d3699ecf24581fd775017757167cdbfa

  • SHA512

    881ff67ec794c6b4444da18acf5b071255443745efdd899cc59b301651ac9d4e5a19e3f4118ddff2a4b90933e5fdbdd3dad023aef17d98dad9abbdd2aae0851a

  • SSDEEP

    3072:Rhz8uealefpCiGZJiEhoQXiHWfJ5dxIq4zulW:XCpCiGZJbxoqE8

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\6df560b101c7dc445d569b90cac73ef8d3699ecf24581fd775017757167cdbfa.exe
    "C:\Users\Admin\AppData\Local\Temp\6df560b101c7dc445d569b90cac73ef8d3699ecf24581fd775017757167cdbfa.exe"
    1⤵
      PID:2460

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2460-1-0x0000000000270000-0x0000000000370000-memory.dmp

      Filesize

      1024KB

    • memory/2460-2-0x00000000001C0000-0x00000000001CB000-memory.dmp

      Filesize

      44KB

    • memory/2460-3-0x0000000000400000-0x000000000040B000-memory.dmp

      Filesize

      44KB

    • memory/2460-5-0x00000000001C0000-0x00000000001CB000-memory.dmp

      Filesize

      44KB

    • memory/2460-4-0x0000000000400000-0x0000000002B43000-memory.dmp

      Filesize

      39.3MB