General
- Target setup.exe
- Size 178KB
- Sample230320-m7ex9adb34
- SHA256 914d0d01e6902bc028bf07ab052222a76888a09b20ec45d0b112a138411b8ecc
- MD5 0648524a157abd65c69d0bf9a6997c6e
- SHA1 93b71ce1e2d0008237bfa91a74bbd740bbc6c47e
- SHA512 58f1a642412da7d9ee8dec046b78d34c1faaf0b5b01bf7fe281621103deb86e10a00b0e00708549319a8637a19a817eeb88b8b510ab0faa8440880bf490c1fae
- SSDEEP 3072:YkVBmO9FJcBzEh3ze9wpBuT2tqbM42N305cVkpR4RVmB:NmCF1h3zeGHuT24oB3YRaR
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
setup.exe
Resource
win7-20230220-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
setup.exe
Resource
win10v2004-20230220-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
smokeloader
Botnet
-
lab
Extracted
Family
-
smokeloader
Version
-
2020
C2
-
http://host-file-host6.com/
-
http://host-host-file8.com/
rc4.i32
rc4.i32
Targets
-
- Target setup.exe
- Size 178KB
- SHA256 914d0d01e6902bc028bf07ab052222a76888a09b20ec45d0b112a138411b8ecc
- MD5 0648524a157abd65c69d0bf9a6997c6e
- SHA1 93b71ce1e2d0008237bfa91a74bbd740bbc6c47e
- SHA512 58f1a642412da7d9ee8dec046b78d34c1faaf0b5b01bf7fe281621103deb86e10a00b0e00708549319a8637a19a817eeb88b8b510ab0faa8440880bf490c1fae
- SSDEEP 3072:YkVBmO9FJcBzEh3ze9wpBuT2tqbM42N305cVkpR4RVmB:NmCF1h3zeGHuT24oB3YRaR
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Suspicious use of SetThreadContext