Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    08-11-2024 09:22

General

  • Target

    9a03353f33056e104624269ac6c93c2f10e46a6e5bfb62ad4540efefd2fb13a2.exe

  • Size

    295KB

  • MD5

    3d453a7b5957aebacd9c6bf4c05d8908

  • SHA1

    3143bf00c4177cf9fe8ee42068be61322349bf47

  • SHA256

    9a03353f33056e104624269ac6c93c2f10e46a6e5bfb62ad4540efefd2fb13a2

  • SHA512

    e3915826b1ddeaaaebe05ab6e956a0b12c4368d3e8d32c873cd132710c484b4ce890aad9d8088f87a5f633a2670af87437b60cd727424110b85966dd2e1a0233

  • SSDEEP

    3072:ab8g0lq8/wkbXNeUv1uO9WonD0PLJl6zZ6+MwOGxTDkaslmc2toiDTNg:csqSpXNP1uhlwFMwV1DkwtDDTO

Malware Config

Extracted

Family

smokeloader

Botnet

pub4

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\9a03353f33056e104624269ac6c93c2f10e46a6e5bfb62ad4540efefd2fb13a2.exe
    "C:\Users\Admin\AppData\Local\Temp\9a03353f33056e104624269ac6c93c2f10e46a6e5bfb62ad4540efefd2fb13a2.exe"
    1⤵
      PID:764

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/764-2-0x0000000002C60000-0x0000000002D60000-memory.dmp

      Filesize

      1024KB

    • memory/764-3-0x0000000000400000-0x0000000000409000-memory.dmp

      Filesize

      36KB

    • memory/764-4-0x0000000000400000-0x0000000002B77000-memory.dmp

      Filesize

      39.5MB

    • memory/764-5-0x0000000000400000-0x0000000002B77000-memory.dmp

      Filesize

      39.5MB