General
- Target setup.exe
- Size 291KB
- Sample230320-np1mnsfc7s
- SHA256 327cadba2fad2913e5fcaba43bb26a14e2d4a49ca679bf449cd317797792845b
- MD5 80945b6890a6028979543a53d4634b8f
- SHA1 7ea497ce5676ede7c12adda837b78bb7646983bb
- SHA512 c0ccead1fe212dd742d5cef1f9afd72be24b17bd81fe1ff7d218907d44604bc333df0ad34fad3a716822e6d28d367b598fde4ae44785ac19180435e770353d38
- SSDEEP 3072:M32XmnRLo6BYqljvMQYfvkX/QEHmVqC/aRM1t7luJcxu65n/zJhMI:8nRLoWlAQXQEGAQ+2umxN/dhMI
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
setup.exe
Resource
win7-20230220-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
setup.exe
Resource
win10v2004-20230220-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
smokeloader
Botnet
-
lab
Extracted
Family
-
smokeloader
Version
-
2020
C2
-
http://host-file-host6.com/
-
http://host-host-file8.com/
rc4.i32
rc4.i32
Targets
-
- Target setup.exe
- Size 291KB
- SHA256 327cadba2fad2913e5fcaba43bb26a14e2d4a49ca679bf449cd317797792845b
- MD5 80945b6890a6028979543a53d4634b8f
- SHA1 7ea497ce5676ede7c12adda837b78bb7646983bb
- SHA512 c0ccead1fe212dd742d5cef1f9afd72be24b17bd81fe1ff7d218907d44604bc333df0ad34fad3a716822e6d28d367b598fde4ae44785ac19180435e770353d38
- SSDEEP 3072:M32XmnRLo6BYqljvMQYfvkX/QEHmVqC/aRM1t7luJcxu65n/zJhMI:8nRLoWlAQXQEGAQ+2umxN/dhMI
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Suspicious use of SetThreadContext