General
- Target installer.exe
- Size 299KB
- Sample230317-dblaqadh87
- SHA256 536e71d2d626e9236bd14ea6cc8a85d43aecaf1ef32dcfe470084697bf1e5ed0
- MD5 6c1f75e3e766e2178a84c2d58e453a3b
- SHA1 feb00b3345ee3e4a501890a423bd38fd92df6479
- SHA512 335d33de1b1ee1d500b7e37b837ea8cdc5cea7e2e735cbfcf80c2c365a7b121cec3dd0896164eca4381b94deb9701bf4fd175fc8b9234586f6292f2b3202e355
- SSDEEP 6144:H9TLv3sAivIo4uuz3O+3Q6MDUKpNXr7ZN6:HNL3shAo4h++bMJBr7Z
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
installer.exe
Resource
win7-20230220-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
installer.exe
Resource
win10v2004-20230220-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
smokeloader
Botnet
-
lab
Extracted
Family
-
smokeloader
Version
-
2020
C2
-
http://host-file-host6.com/
-
http://host-host-file8.com/
rc4.i32
rc4.i32
Targets
-
- Target installer.exe
- Size 299KB
- SHA256 536e71d2d626e9236bd14ea6cc8a85d43aecaf1ef32dcfe470084697bf1e5ed0
- MD5 6c1f75e3e766e2178a84c2d58e453a3b
- SHA1 feb00b3345ee3e4a501890a423bd38fd92df6479
- SHA512 335d33de1b1ee1d500b7e37b837ea8cdc5cea7e2e735cbfcf80c2c365a7b121cec3dd0896164eca4381b94deb9701bf4fd175fc8b9234586f6292f2b3202e355
- SSDEEP 6144:H9TLv3sAivIo4uuz3O+3Q6MDUKpNXr7ZN6:HNL3shAo4h++bMJBr7Z
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Suspicious use of SetThreadContext