General
- Target setup.exe
- Size 248KB
- Sample230320-nbehaafb5w
- SHA256 a2d9ed63fed7a0a411b099619447945b8bbf284f1b63b8c982fcf22ea6c3356e
- MD5 e210ca294d81d4caef437de591379f92
- SHA1 45ba0dd35df78ac9286a78364a761cd4e22e5f0e
- SHA512 074e25263c42f3bd11f60df1207595db427b9162c3051431041513cc226f722693c6888126ea9977b10d3570bcfd0eb41e57fd2f17112b87d46c4b51bfb9c6e9
- SSDEEP 3072:TDGhbwXcwLXmX2Bne+l9shWHBzyYYx7dre+5nbrVcU:swXcwLXAineqwWHWdreAvVcU
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
setup.exe
Resource
win7-20230220-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
setup.exe
Resource
win10v2004-20230220-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
smokeloader
Botnet
-
lab
Extracted
Family
-
smokeloader
Version
-
2020
C2
-
http://host-file-host6.com/
-
http://host-host-file8.com/
rc4.i32
rc4.i32
Targets
-
- Target setup.exe
- Size 248KB
- SHA256 a2d9ed63fed7a0a411b099619447945b8bbf284f1b63b8c982fcf22ea6c3356e
- MD5 e210ca294d81d4caef437de591379f92
- SHA1 45ba0dd35df78ac9286a78364a761cd4e22e5f0e
- SHA512 074e25263c42f3bd11f60df1207595db427b9162c3051431041513cc226f722693c6888126ea9977b10d3570bcfd0eb41e57fd2f17112b87d46c4b51bfb9c6e9
- SSDEEP 3072:TDGhbwXcwLXmX2Bne+l9shWHBzyYYx7dre+5nbrVcU:swXcwLXAineqwWHWdreAvVcU
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Suspicious use of SetThreadContext