Analysis
-
max time kernel
140s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
09-11-2024 05:30
General
-
Target
d39fdf80785be4b06809825a56b59ab494323fe1b2da317f5b2cfd0b6c1605d6.exe
-
Size
199KB
-
MD5
e329041d8eb5d3f035c3246674a55942
-
SHA1
e7a58f0a4786fa3151936072314b960284b858e1
-
SHA256
d39fdf80785be4b06809825a56b59ab494323fe1b2da317f5b2cfd0b6c1605d6
-
SHA512
8b69f1bda8eaf47a2ac3037492e6c936468611de7e7314159f3811b84a90ce3bbf193ddc5822fde1173a859f8d654506f2571b47cf79ba6d771d7a99fc1e923a
-
SSDEEP
3072:o7jXQnYfHJv8Gx02dWUxXSK/HrUcdaNQwe+S/VPm7:kX/J42dWUxiAUcINQ2S/Q
Score
10/10
Malware Config
Extracted
Family
smokeloader
Botnet
slov
Signatures
-
SmokeLoader
Modular backdoor trojan in use since 2014.
-
Smokeloader family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\d39fdf80785be4b06809825a56b59ab494323fe1b2da317f5b2cfd0b6c1605d6.exe"C:\Users\Admin\AppData\Local\Temp\d39fdf80785be4b06809825a56b59ab494323fe1b2da317f5b2cfd0b6c1605d6.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
36KB
-
Filesize
1024KB
-
Filesize
39.5MB
-
Filesize
1024KB