General
-
Target
file.exe
-
Size
282KB
-
Sample
230313-r3514aag68
-
MD5
96a441e629af87fef767b3052f2724d8
-
SHA1
4f0e85147262cb36b76342b7b10aa5cb3bc2d11c
-
SHA256
473c20c1fe520cf1b143342a2f3bec3dbea893ef9c9a8a698bdc25e35ef0a565
-
SHA512
9d0276ab58d5e17fbf4aa3c55ce4f969f6fe16a437200eeed14a70da76a10017281ddaf381f5fdbaf65fb4cf23f3dac2abf1f6d06af9fa79f71e1648d6c4e931
-
SSDEEP
3072:ZS1c/CutuLT8KiyxTncZDOts0WohVcO2IyVGhQ1FtTxvn:ZScsLTjSZCXWohH2IyVGhotT
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20230220-en
Malware Config
Extracted
smokeloader
lab
Extracted
smokeloader
2020
http://host-file-host6.com/
http://host-host-file8.com/
Targets
-
-
Target
file.exe
-
Size
282KB
-
MD5
96a441e629af87fef767b3052f2724d8
-
SHA1
4f0e85147262cb36b76342b7b10aa5cb3bc2d11c
-
SHA256
473c20c1fe520cf1b143342a2f3bec3dbea893ef9c9a8a698bdc25e35ef0a565
-
SHA512
9d0276ab58d5e17fbf4aa3c55ce4f969f6fe16a437200eeed14a70da76a10017281ddaf381f5fdbaf65fb4cf23f3dac2abf1f6d06af9fa79f71e1648d6c4e931
-
SSDEEP
3072:ZS1c/CutuLT8KiyxTncZDOts0WohVcO2IyVGhQ1FtTxvn:ZScsLTjSZCXWohH2IyVGhotT
Score10/10-
Suspicious use of SetThreadContext
-