General
- Target file.exe
- Size 201KB
- Sample230124-1vgg7sff2s
- SHA256 eed1f296204360f8f563e9dbceca4628aef8d7c4437c6359ac20d1bfc6fc9573
- MD5 2f0249d59626c929aa9d7392965775ba
- SHA1 26f74dee4e4dc48c194b8fbdfa576ead91c1c497
- SHA512 c2d68c1faffcbf651af1221f581cc65988ec49a132462dd301cfba4cacf819a8519edffbab934579bfa7593ec973f0a203ad9e8150df0aad570e2b6fd5c7f976
- SSDEEP 3072:TBN24FdiLvrpy05gqDESQkCiDOVRa1Z7TE6Vsji:dSLjpyKESV9D5379W
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20221111-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20221111-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 201KB
- SHA256 eed1f296204360f8f563e9dbceca4628aef8d7c4437c6359ac20d1bfc6fc9573
- MD5 2f0249d59626c929aa9d7392965775ba
- SHA1 26f74dee4e4dc48c194b8fbdfa576ead91c1c497
- SHA512 c2d68c1faffcbf651af1221f581cc65988ec49a132462dd301cfba4cacf819a8519edffbab934579bfa7593ec973f0a203ad9e8150df0aad570e2b6fd5c7f976
- SSDEEP 3072:TBN24FdiLvrpy05gqDESQkCiDOVRa1Z7TE6Vsji:dSLjpyKESV9D5379W
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Detects Smokeloader packer
-
Executes dropped EXE
-
Suspicious use of SetThreadContext