General
- Target file.exe
- Size 297KB
- Sample230317-vxj38abc8t
- SHA256 65c4466e69c4b05caccf5c56be42676b0fbfa9bf7c609aedcb34145dfe3c7100
- MD5 ba9031fda852359a25f523add938f3b4
- SHA1 1a745a18138d437f3a614f6271f9cd78053c5953
- SHA512 be6838f39bc5edc78f4913640986d0e689ceb2eb7836756d9ceca02d248cf325adf40840cc6158b9c8fcb25ac8e41488a889e8572254529c9a7bc36470b1ae93
- SSDEEP 3072:K0dnLgZLyVGudtLal4ZwDtQ0SyCADID7B2sLOAtJ1EP0+9I4yqitZuM:LZgZLykugOwD3SyClnQSOAtJ1E8+0fu
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20230220-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20230220-en
10 signatures
150 seconds
Malware Config
Extracted
Family
-
smokeloader
Botnet
-
lab
Extracted
Family
-
smokeloader
Version
-
2020
C2
-
http://host-file-host6.com/
-
http://host-host-file8.com/
rc4.i32
rc4.i32
Targets
-
- Target file.exe
- Size 297KB
- SHA256 65c4466e69c4b05caccf5c56be42676b0fbfa9bf7c609aedcb34145dfe3c7100
- MD5 ba9031fda852359a25f523add938f3b4
- SHA1 1a745a18138d437f3a614f6271f9cd78053c5953
- SHA512 be6838f39bc5edc78f4913640986d0e689ceb2eb7836756d9ceca02d248cf325adf40840cc6158b9c8fcb25ac8e41488a889e8572254529c9a7bc36470b1ae93
- SSDEEP 3072:K0dnLgZLyVGudtLal4ZwDtQ0SyCADID7B2sLOAtJ1EP0+9I4yqitZuM:LZgZLykugOwD3SyClnQSOAtJ1E8+0fu
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Suspicious use of SetThreadContext