General
- Target file.exe
- Size 274KB
- Sample230309-2m8gdsaf27
- SHA256 75a4ef7fe472ec8e185eaf1b8af2a5d42557fa0ea067d08ff15b1774b48fa38f
- MD5 a6f62cca92f096f27eae9ab4f014c023
- SHA1 fbd7b9fb7f72160b374592f93ccc606534fc8b31
- SHA512 30c9f57066bdd28e1a7df57cc4f52374f5ea1989070d4368da2c29e55b920fa19dce180009ffcf8d0c099f89a3106dd1c2fc744634eabeb7b093a862a2c6e1c5
- SSDEEP 3072:wmIdVULamO1KA5Y/oG09AISHMlOhFiMWlkRIjOIt49RWsCh6ha7sprmu1:wCL44A5K091qvlIjRwWsCYIYV
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20230220-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20230220-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
smokeloader
Botnet
-
lab
Extracted
Family
-
smokeloader
Version
-
2020
C2
-
http://host-file-host6.com/
-
http://host-host-file8.com/
rc4.i32
rc4.i32
Targets
-
- Target file.exe
- Size 274KB
- SHA256 75a4ef7fe472ec8e185eaf1b8af2a5d42557fa0ea067d08ff15b1774b48fa38f
- MD5 a6f62cca92f096f27eae9ab4f014c023
- SHA1 fbd7b9fb7f72160b374592f93ccc606534fc8b31
- SHA512 30c9f57066bdd28e1a7df57cc4f52374f5ea1989070d4368da2c29e55b920fa19dce180009ffcf8d0c099f89a3106dd1c2fc744634eabeb7b093a862a2c6e1c5
- SSDEEP 3072:wmIdVULamO1KA5Y/oG09AISHMlOhFiMWlkRIjOIt49RWsCh6ha7sprmu1:wCL44A5K091qvlIjRwWsCYIYV
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Suspicious use of SetThreadContext