General
- Target file.exe
- Size 295KB
- Sample230317-q2ebbage44
- SHA256 91752dfafeac37df2e377425006fb53dc65ea27109c6e841b5412b58263be2df
- MD5 88c9c74f227ab2c4338c33efbb177c80
- SHA1 2274b54cedb4957e3e98b743cf6a7eb04d7514f4
- SHA512 55f8797c9aacd6ddc9f2549cbfbf76b1fc5a763651bc84b78156d4a7fcf4917dedbade334ef49cfb770243eb749249af9353dca19e9bb49ae571808879462381
- SSDEEP 3072:rSUPwyLz6WBVgPlr6MZCF2PSXMsU/mFeV6LWYiI3HM3z:euwyLzjBVg9rpSXMsmmFeVFj
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20230220-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20230220-en
10 signatures
150 seconds
Malware Config
Extracted
Family
-
smokeloader
Botnet
-
lab
Extracted
Family
-
smokeloader
Version
-
2020
C2
-
http://host-file-host6.com/
-
http://host-host-file8.com/
rc4.i32
rc4.i32
Targets
-
- Target file.exe
- Size 295KB
- SHA256 91752dfafeac37df2e377425006fb53dc65ea27109c6e841b5412b58263be2df
- MD5 88c9c74f227ab2c4338c33efbb177c80
- SHA1 2274b54cedb4957e3e98b743cf6a7eb04d7514f4
- SHA512 55f8797c9aacd6ddc9f2549cbfbf76b1fc5a763651bc84b78156d4a7fcf4917dedbade334ef49cfb770243eb749249af9353dca19e9bb49ae571808879462381
- SSDEEP 3072:rSUPwyLz6WBVgPlr6MZCF2PSXMsU/mFeV6LWYiI3HM3z:euwyLzjBVg9rpSXMsmmFeVFj
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Suspicious use of SetThreadContext