Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
-
submitted
11-11-2024 09:42
General
-
Target
1dca4747cea1b6b37979a905bddeec8259e5f398.exe
-
Size
224KB
-
MD5
bfed0c169bf6f00495da2e6de9fd87e5
-
SHA1
1dca4747cea1b6b37979a905bddeec8259e5f398
-
SHA256
705c06d1436bef370d7f66c10e397d41247a2c8aa3c330ada91492e9e1a0e1af
-
SHA512
6aab3d4f00c1d06c7707e2e44ee6b1ea8e7b77cf19676d0cae94cb674163d0af916cbf39134b3699aa6e5e21e5ff4f75412b719bffd36328422b7091dffb3e79
-
SSDEEP
3072:mXVjEB2LP/U9nMwnZ5LcQHdp1w3UjbSJYHsXnTK8K2cP1/8:O1EB2LXWnXnUj6SGHU+q
Score
10/10
Malware Config
Extracted
Family
smokeloader
Botnet
new2
Signatures
-
SmokeLoader
Modular backdoor trojan in use since 2014.
-
Smokeloader family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\1dca4747cea1b6b37979a905bddeec8259e5f398.exe"C:\Users\Admin\AppData\Local\Temp\1dca4747cea1b6b37979a905bddeec8259e5f398.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1024KB
-
Filesize
36KB
-
Filesize
36KB
-
Filesize
40.1MB