Overview

overview

10

Static

static

3

ac6a932b59...1d.exe

windows7-x64

10

ac6a932b59...1d.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    28-06-2024 10:48

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    ac6a932b599565bdc10acfecf938c41d.exe

  • Size

    277KB

  • MD5

    ac6a932b599565bdc10acfecf938c41d

  • SHA1

    9fec1f659f9fec54d920a0a73c66dfa99d80ef57

  • SHA256

    35bf9dfd223e02da2ee3d57ec493156787a3c2cecb8b655a583985a2f14cc6e3

  • SHA512

    d8e9f2c44aeb7634552af23a77757af41a50543ff7d5b4c620d9c4a19462d65d991dd19cb8e2063ca1424ef9206158c9fe74a1c63f84d1fe60fd347bdc314e5f

  • SSDEEP

    3072:uKf5LPigdxK34S+wt79duyt4J5QJ1+ZtQXGKKXvHAddkxrj:/hLPiILSTBLRt4cuZtQ2Xvnrj

Score
10/10
smokeloaderpub2backdoortrojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub2

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\ac6a932b599565bdc10acfecf938c41d.exe
    "C:\Users\Admin\AppData\Local\Temp\ac6a932b599565bdc10acfecf938c41d.exe"
    1⤵
      PID:2244

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2244-4-0x0000000000400000-0x000000000040B000-memory.dmp
      Filesize

      44KB

      Download
    • memory/2244-2-0x00000000002B0000-0x00000000003B0000-memory.dmp
      Filesize

      1024KB

      Download
    • memory/2244-3-0x00000000001B0000-0x00000000001BB000-memory.dmp
      Filesize

      44KB

      Download
    • memory/2244-1-0x0000000000400000-0x0000000002361000-memory.dmp
      Filesize

      31.4MB

      Download