General
- Target file.exe
- Size 192KB
- Sample230205-cq92ysbb8x
- SHA256 21e93bc22260e4e6b3752b7935309f8f72ec8e90347448c208051b69a5c4ef71
- MD5 386b2f812208023c0843dccf1596d42c
- SHA1 79fe2599dae3e463e3afbeda5c3ee2e78da41a84
- SHA512 12a58c9bbf06838912af919b38aa88e59dba8e19c3dbb5b97bef95e5b656ded04494ee243e98894d4b415a80d6afc10067f44d2fca2a2532d7909dafee0459e3
- SSDEEP 3072:MtPOFPrNTtisLqIfWZi5PWLspMkDzRjEVQipa+YBETKCfVN:MtPK/isLBf5EQl+OOKC9N
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20221111-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 192KB
- SHA256 21e93bc22260e4e6b3752b7935309f8f72ec8e90347448c208051b69a5c4ef71
- MD5 386b2f812208023c0843dccf1596d42c
- SHA1 79fe2599dae3e463e3afbeda5c3ee2e78da41a84
- SHA512 12a58c9bbf06838912af919b38aa88e59dba8e19c3dbb5b97bef95e5b656ded04494ee243e98894d4b415a80d6afc10067f44d2fca2a2532d7909dafee0459e3
- SSDEEP 3072:MtPOFPrNTtisLqIfWZi5PWLspMkDzRjEVQipa+YBETKCfVN:MtPK/isLBf5EQl+OOKC9N
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Detects Smokeloader packer
-
Executes dropped EXE
-
Suspicious use of SetThreadContext