General
- Target file.exe
- Size 222KB
- Sample221225-bb3hwsah63
- SHA256 b606df43759b25e1300a9042370170e20f3f126aba31673b8d952fc11397c04c
- MD5 ee95ff2755305e8eff9f6e1d2e3e5aeb
- SHA1 8eeab94b1432530e8d0decb35ab0d6448ca183ee
- SHA512 3aa75f5afc1a187f6413d2bcaf8eadfc90970e34bf0d0164af4141aecada238033f8829ea1fca15ef26bd5361837103126333d4fecb221eaf8626500ed5b9c2e
- SSDEEP 3072:YDenLl7x5mlAN8XJdMehkP1uzL5auDXUgaRuHf/ln:rLl7qliUJdbhWuxaMAC
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220901-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20221111-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 222KB
- SHA256 b606df43759b25e1300a9042370170e20f3f126aba31673b8d952fc11397c04c
- MD5 ee95ff2755305e8eff9f6e1d2e3e5aeb
- SHA1 8eeab94b1432530e8d0decb35ab0d6448ca183ee
- SHA512 3aa75f5afc1a187f6413d2bcaf8eadfc90970e34bf0d0164af4141aecada238033f8829ea1fca15ef26bd5361837103126333d4fecb221eaf8626500ed5b9c2e
- SSDEEP 3072:YDenLl7x5mlAN8XJdMehkP1uzL5auDXUgaRuHf/ln:rLl7qliUJdbhWuxaMAC
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Detects Smokeloader packer
-
Executes dropped EXE
-
Suspicious use of SetThreadContext