General
- Target file.exe
- Size 213KB
- Sample221107-nevcxadcb7
- SHA256 9a941cff99433b69e172af8c97d2738a4c4846cd2f7dcf769bfa20f2c2dc21d9
- MD5 109b80dd2c58b3d11d2337a5b1e3c024
- SHA1 6c60111cb3e687f8144d80a68dc0040215d55677
- SHA512 696f7623830e9923fb49328cce44d04591e9c02481af18c16fe1c656a3a50cab081e527c07e18dd350353f092c87090387bb37ff4afc5d4bf4bd1caf32f4a505
- SSDEEP 3072:gaBNUcU5wjxV5LuWOjMrYN5QBPFv45ypI4N5aEWuThSY:guW6NLwMrxFv+4N5aEWuH
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20220812-en
19 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 213KB
- SHA256 9a941cff99433b69e172af8c97d2738a4c4846cd2f7dcf769bfa20f2c2dc21d9
- MD5 109b80dd2c58b3d11d2337a5b1e3c024
- SHA1 6c60111cb3e687f8144d80a68dc0040215d55677
- SHA512 696f7623830e9923fb49328cce44d04591e9c02481af18c16fe1c656a3a50cab081e527c07e18dd350353f092c87090387bb37ff4afc5d4bf4bd1caf32f4a505
- SSDEEP 3072:gaBNUcU5wjxV5LuWOjMrYN5QBPFv45ypI4N5aEWuThSY:guW6NLwMrxFv+4N5aEWuH
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Detects Smokeloader packer
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Suspicious use of SetThreadContext