General
- Target setup.exe
- Size 248KB
- Sample230320-ndpq2afb7v
- SHA256 7fe8549bdd03b859a894da8128e004c7d01edbb7d2281b38481caa6e8ad92ef2
- MD5 5dd0f7d7c9121442faaef8d965ddd54f
- SHA1 f2e97b41ab5e65243861a2aff8e81b2e926c586f
- SHA512 8273b5ef1b49278b9c7407e997517e1d0a5fcb505c3aa371a0e9f10a72cd105f3e03878091f37fde8fb18fa5fe5c41743c2f627969f7ae896b13e6bf38ebd54d
- SSDEEP 3072:eDAhv3XsLb+Hm15HeDy0mejpQ2/ciTY653briyiQ:B3XsLb2mhejqAciTYcviyP
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
setup.exe
Resource
win7-20230220-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
setup.exe
Resource
win10v2004-20230220-en
9 signatures
150 seconds
Malware Config
Extracted
Family
-
smokeloader
Botnet
-
lab
Extracted
Family
-
smokeloader
Version
-
2020
C2
-
http://host-file-host6.com/
-
http://host-host-file8.com/
rc4.i32
rc4.i32
Targets
-
- Target setup.exe
- Size 248KB
- SHA256 7fe8549bdd03b859a894da8128e004c7d01edbb7d2281b38481caa6e8ad92ef2
- MD5 5dd0f7d7c9121442faaef8d965ddd54f
- SHA1 f2e97b41ab5e65243861a2aff8e81b2e926c586f
- SHA512 8273b5ef1b49278b9c7407e997517e1d0a5fcb505c3aa371a0e9f10a72cd105f3e03878091f37fde8fb18fa5fe5c41743c2f627969f7ae896b13e6bf38ebd54d
- SSDEEP 3072:eDAhv3XsLb+Hm15HeDy0mejpQ2/ciTY653briyiQ:B3XsLb2mhejqAciTYcviyP
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Suspicious use of SetThreadContext