Analysis
-
max time kernel
73s -
max time network
19s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
-
submitted
08-11-2024 18:09
General
-
Target
4aa1c943433808697e0159066fe300c755730bb2.exe
-
Size
229KB
-
MD5
fbb5e9ea063fbe070c03ebc6cade7399
-
SHA1
4aa1c943433808697e0159066fe300c755730bb2
-
SHA256
e467543c93b76a40908a0db29f7e328d27feb7230d886572d7c5c901b4365f8a
-
SHA512
3e82ff438d2cdaf69bb4dbc88550af264f621097ee1e2a5ea7181e5dca1c9a39b5316a26a0b07475337fa40ff606f1075a5355fde8c0eb8b36935c8f7ca8e02c
-
SSDEEP
1536:WClsOAwqdOIUyqbIEbFTjHATnkfoekkYtDA4MES/lD0Cw9uBFhX0UWqyykYZzTaR:Nt+lSxTbXoLt7XSdDa9eLX0Uvpq
Score
10/10
Malware Config
Signatures
-
SmokeLoader
Modular backdoor trojan in use since 2014.
-
Smokeloader family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\4aa1c943433808697e0159066fe300c755730bb2.exe"C:\Users\Admin\AppData\Local\Temp\4aa1c943433808697e0159066fe300c755730bb2.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
36KB
-
Filesize
1024KB
-
Filesize
36KB
-
Filesize
544KB
-
Filesize
544KB