Analysis
-
max time kernel
121s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
-
submitted
30/03/2025, 21:02
General
-
Target
2025-03-30_89cde6db31c61c1cabac9bef28f501ce_amadey_smoke-loader.exe
-
Size
5.0MB
-
MD5
89cde6db31c61c1cabac9bef28f501ce
-
SHA1
a67735ca56413b9ca46e435f8121eacf849d31ee
-
SHA256
5aece3732371ea0a03a77c4ba295784699005c054e4e95c8bf437950da52fd40
-
SHA512
6058d322aef7f87303c11d3d3d8778d0907fc107f18d158d95f416d6b7ce46c9622509c8f2b06dc7bf22bf4faa78fc8536cbf5167c6f240fd5ec40eb0836e3fe
-
SSDEEP
98304:6wTJ8NZBW3SIQxHlcfPouzsHFGipvQ/D8CwpFPEhBPVK6VMfVXrvG:zTJ6q3rQOzWvQr81PEhBRVMNbvG
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Modifies Internet Explorer settings 1 TTPs 1 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2025-03-30_89cde6db31c61c1cabac9bef28f501ce_amadey_smoke-loader.exe"C:\Users\Admin\AppData\Local\Temp\2025-03-30_89cde6db31c61c1cabac9bef28f501ce_amadey_smoke-loader.exe"1⤵
- System Location Discovery: System Language Discovery
- Modifies Internet Explorer settings
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx