General
- Target file.exe
- Size 309KB
- Sample230315-nv62msfa3z
- SHA256 aa5cfe1aca97f5d6871a6fcdca915dd5714fa593f2dd9a45500cec888d8fb8f3
- MD5 ff4b5ed7f4c5a419433c7ddf121bbddb
- SHA1 894bc168cd3231929493c62c7a14901500bce748
- SHA512 cf0f67ad6559d460032e4abfd69330fa17f4f04589eccc65832ed706cbb35e35bfa5adc271ddb250a4cb9370141a5eae4e2b84e4dc4d75db20382b8750482f76
- SSDEEP 3072:AGSY/H8LTn3JdSbcTlLlFWSxBGvywacWCKv6zGeKNlfHqjjJ:AY/cLjrVlLlQp6efzG51qPJ
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20230220-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20230220-en
9 signatures
150 seconds
Malware Config
Extracted
Family
-
smokeloader
Botnet
-
lab
Extracted
Family
-
smokeloader
Version
-
2020
C2
-
http://host-file-host6.com/
-
http://host-host-file8.com/
rc4.i32
rc4.i32
Targets
-
- Target file.exe
- Size 309KB
- SHA256 aa5cfe1aca97f5d6871a6fcdca915dd5714fa593f2dd9a45500cec888d8fb8f3
- MD5 ff4b5ed7f4c5a419433c7ddf121bbddb
- SHA1 894bc168cd3231929493c62c7a14901500bce748
- SHA512 cf0f67ad6559d460032e4abfd69330fa17f4f04589eccc65832ed706cbb35e35bfa5adc271ddb250a4cb9370141a5eae4e2b84e4dc4d75db20382b8750482f76
- SSDEEP 3072:AGSY/H8LTn3JdSbcTlLlFWSxBGvywacWCKv6zGeKNlfHqjjJ:AY/cLjrVlLlQp6efzG51qPJ
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Suspicious use of SetThreadContext