General
- Target setup.exe
- Size 180KB
- Sample230321-bxd3esab9w
- SHA256 29b8656da62ec521d4d578284483ce143119520ec6b7fec40b5ca82d3eaa564e
- MD5 2894a3487ada14cc6395f03e99feac86
- SHA1 43254e9b5fcb930fbdcf324510de230b0e457e25
- SHA512 be6081463507bef8e33b8b8ff624fc161c6f96950c49e6d87880dc8cc0fe500f07243a2869a7423d360b25ae9723ae8c8846da824b3ee43b1d8a22c7dcb4e810
- SSDEEP 3072:gqi32G+I0cozc+pRSv1gnKpvJXjW3JMUIYaBlZZZ:a32hTxRzQSJTNGZ
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
setup.exe
Resource
win7-20230220-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
setup.exe
Resource
win10v2004-20230220-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
smokeloader
Botnet
-
lab
Extracted
Family
-
smokeloader
Version
-
2020
C2
-
http://host-file-host6.com/
-
http://host-host-file8.com/
rc4.i32
rc4.i32
Targets
-
- Target setup.exe
- Size 180KB
- SHA256 29b8656da62ec521d4d578284483ce143119520ec6b7fec40b5ca82d3eaa564e
- MD5 2894a3487ada14cc6395f03e99feac86
- SHA1 43254e9b5fcb930fbdcf324510de230b0e457e25
- SHA512 be6081463507bef8e33b8b8ff624fc161c6f96950c49e6d87880dc8cc0fe500f07243a2869a7423d360b25ae9723ae8c8846da824b3ee43b1d8a22c7dcb4e810
- SSDEEP 3072:gqi32G+I0cozc+pRSv1gnKpvJXjW3JMUIYaBlZZZ:a32hTxRzQSJTNGZ
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Suspicious use of SetThreadContext