General
- Target setup.exe
- Size 249KB
- Sample230320-npf82adc57
- SHA256 e7a74e351e3011aab2b81ea087afc0beaae8bf3be30596b6a0a157ac0e078288
- MD5 0f3b96ab01bae6211eb51eee7ee58725
- SHA1 8b474867d88f36557da76d907f59208466a03287
- SHA512 73f648c132a0ad8c7def05aad4f8414657e063d8771bc683b21017403459eb5b594624881ab60670d2f5168af563ea7b8a5494ef8a31e94f353cf11d4345fbd7
- SSDEEP 3072:nDSCDXwLvmuwphfb7fR/3W2WmnHsH/WqR+XYRG53bryINe:DDXwLv+RPpmOqRIlvyINe
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
setup.exe
Resource
win7-20230220-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
setup.exe
Resource
win10v2004-20230221-en
10 signatures
150 seconds
Malware Config
Extracted
Family
-
smokeloader
Botnet
-
lab
Extracted
Family
-
smokeloader
Version
-
2020
C2
-
http://host-file-host6.com/
-
http://host-host-file8.com/
rc4.i32
rc4.i32
Targets
-
- Target setup.exe
- Size 249KB
- SHA256 e7a74e351e3011aab2b81ea087afc0beaae8bf3be30596b6a0a157ac0e078288
- MD5 0f3b96ab01bae6211eb51eee7ee58725
- SHA1 8b474867d88f36557da76d907f59208466a03287
- SHA512 73f648c132a0ad8c7def05aad4f8414657e063d8771bc683b21017403459eb5b594624881ab60670d2f5168af563ea7b8a5494ef8a31e94f353cf11d4345fbd7
- SSDEEP 3072:nDSCDXwLvmuwphfb7fR/3W2WmnHsH/WqR+XYRG53bryINe:DDXwLv+RPpmOqRIlvyINe
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Suspicious use of SetThreadContext