Analysis

  • max time kernel
    119s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    15-12-2024 13:55

General

  • Target

    867265681c37f48c1a4c6a915a9e7902c7255e4b2c18c56a55a2628aff12201b.exe

  • Size

    234KB

  • MD5

    92c157e722f62b100e00f833a23c09a9

  • SHA1

    573cf33c99f6a2af5e63496a4c19e43e4c37b8cd

  • SHA256

    867265681c37f48c1a4c6a915a9e7902c7255e4b2c18c56a55a2628aff12201b

  • SHA512

    190f9c88c6170ca55ba770a1655474c719a3f601e6cc32f2514ae291ddcf6057a1c0645715af3b22f0f4253bfcba9c3f2e9cd92a02b2a56c6894e2977f77f303

  • SSDEEP

    3072:CZ/yGPLpYkoapdZ45wZqb7+IBXf8x3rHaz2NiruK2qhXJ2v40T2ui7le6:I/HLsapdhYBv8xb60NKMv9T2lhe6

Malware Config

Extracted

Family

smokeloader

Botnet

2023

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\867265681c37f48c1a4c6a915a9e7902c7255e4b2c18c56a55a2628aff12201b.exe
    "C:\Users\Admin\AppData\Local\Temp\867265681c37f48c1a4c6a915a9e7902c7255e4b2c18c56a55a2628aff12201b.exe"
    1⤵
      PID:1144

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1144-4-0x00000000005B0000-0x00000000006B0000-memory.dmp

      Filesize

      1024KB

    • memory/1144-3-0x0000000000400000-0x0000000000409000-memory.dmp

      Filesize

      36KB

    • memory/1144-1-0x0000000000400000-0x0000000000458000-memory.dmp

      Filesize

      352KB

    • memory/1144-2-0x0000000000220000-0x0000000000229000-memory.dmp

      Filesize

      36KB