SecuriteInfo[.]com[.]Trojan[.]Win32[.]SmokeLoader[.]GEH[.]MTB[.]29502[.]25960[.]exe

General

Target
SecuriteInfo.com.Trojan.Win32.SmokeLoader.GEH.MTB.29502.25960.exe
Size 192KB
Sample230209-2l5dcahf87
SHA256 cedb5a3c5c020cafc8082c1d61b1c8d3d8dd21a7f9c56d2eb581da3fe6486dbe
MD5 357bd89eed5ed9338e52399a08c54250
SHA1 40c04d62944d65ba2aa1e3582bd5b1f0e5517405
SHA512 989453aa20671008ed603960dca18fb911d8772d0067ef09f3df28d392e30686322c446d9a10f49f00ce11e7dc11ba9e26036752f971aa7e280249a1d9acc237
SSDEEP 3072:ltf48vwH+oOtspRXDXadpkmRIdTHJDrbgUMawP7CSGliZng4rlBcxhkPz0Y:lt1v4uKRTadpkmRILDg0SGsZ1bIh5Y
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

SecuriteInfo.com.Trojan.Win32.SmokeLoader.GEH.MTB.29502.25960.exe

.exe 192KB

SecuriteInfo.com.Trojan.Win32.SmokeLoader.GEH.MTB.29502.25960.exe

IMPHASH 3ae714bb16df7ea6110fd4db3c856d1e
SHA256 cedb5a3c5c020cafc8082c1d61b1c8d3d8dd21a7f9c56d2eb581da3fe6486dbe
MD5 357bd89eed5ed9338e52399a08c54250
SHA1 40c04d62944d65ba2aa1e3582bd5b1f0e5517405
SHA512 989453aa20671008ed603960dca18fb911d8772d0067ef09f3df28d392e30686322c446d9a10f49f00ce11e7dc11ba9e26036752f971aa7e280249a1d9acc237
SSDEEP 3072:ltf48vwH+oOtspRXDXadpkmRIdTHJDrbgUMawP7CSGliZng4rlBcxhkPz0Y:lt1v4uKRTadpkmRILDg0SGsZ1bIh5Y
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

31555

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA RequestWakeupLatency CreateFileA FindActCtxSectionStringW WriteConsoleInputW ClearCommError WriteFile FindFirstVolumeMountPointA CreateDirectoryExW LocalFlags WaitForMultipleObjects ReadConsoleInputA FindNextVolumeMountPointA VerifyVersionInfoW GetVersionExW GetProcessId OpenEventA WriteConsoleOutputAttribute GetLocaleInfoW GetProcAddress LocalAlloc GetCommandLineW GetBinaryTypeW OpenMutexA GetConsoleTitleA SearchPathA FindResourceA FreeConsole UpdateResourceW GetLastError GetProfileSectionW SetConsoleCursorInfo GetConsoleAliasW WritePrivateProfileSectionA GlobalFlags GetConsoleAliasesLengthW FindResourceW SetVolumeMountPointW HeapAlloc GetLocaleInfoA GetComputerNameA GetCurrentProcessId CreateNamedPipeA EnumResourceLanguagesW SetHandleInformation _hwrite EnumTimeFormatsA ZombifyActCtx DeleteVolumeMountPointA GetModuleHandleA ReleaseActCtx WritePrivateProfileStringA GetUserDefaultLangID CreateMemoryResourceNotification WaitForSingleObject GetLongPathNameW EnumTimeFormatsW VerifyVersionInfoA EnumCalendarInfoA FindNextFileA SetLastError SetCriticalSectionSpinCount SetStdHandle WriteConsoleW RaiseException RtlUnwind HeapFree DeleteFileA HeapSetInformation GetStartupInfoW EncodePointer DecodePointer IsProcessorFeaturePresent TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetModuleHandleW GetCurrentThreadId InterlockedDecrement HeapCreate EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess ExitProcess GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage Sleep HeapSize MultiByteToWideChar WideCharToMultiByte LoadLibraryW LCMapStringW GetStringTypeW HeapReAlloc GetConsoleCP GetConsoleMode FlushFileBuffers ReadFile SetFilePointer CloseHandle CreateFileW

user32

GetComboBoxInfo

Sharing