Analysis
-
max time kernel
148s -
max time network
133s -
platform
windows10-2004_x64 -
resource
win10v2004-20250314-en -
resource tags
-
submitted
05/04/2025, 22:35
General
-
Target
2025-04-05_1a6735d95aaf0063aa4e8e5cf51fc662_amadey_black-basta_luca-stealer_remcos_smoke-loader.exe
-
Size
431KB
-
MD5
1a6735d95aaf0063aa4e8e5cf51fc662
-
SHA1
46f69876a9096579981d57f31645c89a922b9dcc
-
SHA256
b2e60d3efcf48bdc3f3c3a476de2a71d3a29728bffa7f04f0f1f4114eaaff465
-
SHA512
7a3c7c7e0b2c380ab27d5aca70d520b5429493ce2a3240a46fb45fce1d809c8a3949cec5a5c7064845cbd09349954bfce22f4ff74c9cbdfc5405633e3f3f41be
-
SSDEEP
6144:PIdUXq44bq4LrqMUz2y6cdjJ4nCb0KhEekcdK5xAO2ujXapSc3kou:PIdU6tdyDJZQKhEe7WAuWpmou
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of FindShellTrayWindow 1 IoCs
-
Suspicious use of SendNotifyMessage 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2025-04-05_1a6735d95aaf0063aa4e8e5cf51fc662_amadey_black-basta_luca-stealer_remcos_smoke-loader.exe"C:\Users\Admin\AppData\Local\Temp\2025-04-05_1a6735d95aaf0063aa4e8e5cf51fc662_amadey_black-basta_luca-stealer_remcos_smoke-loader.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage