General
- Target setup.exe
- Size 320KB
- Sample230322-bax7sadh93
- SHA256 23488255342c1cb2d2b0c3abf96df717e4e6403768c36f2c9c44fc9cb70fee1b
- MD5 dad11829d5dc7eaaffba76a0cec749c2
- SHA1 57abf55a6811571e654054c01a0cc945fe095016
- SHA512 f2ad22de37a3647ce9b9cc45a34c9691b4ebf9dbbfc01938aab4b54c0d54ae96c2dcd93e3d0515d1cb487197d7408b1431bc464f2d7f0b58edcf749aa9bf4529
- SSDEEP 6144:2rWKL+VhtCq4amGGGGG+pqKPcTZI94WvlQ:2rWKiXtCq4fOTZBWK
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
setup.exe
Resource
win7-20230220-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
setup.exe
Resource
win10v2004-20230220-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
smokeloader
Botnet
-
lab
Extracted
Family
-
smokeloader
Version
-
2020
C2
-
http://host-file-host6.com/
-
http://host-host-file8.com/
rc4.i32
rc4.i32
Targets
-
- Target setup.exe
- Size 320KB
- SHA256 23488255342c1cb2d2b0c3abf96df717e4e6403768c36f2c9c44fc9cb70fee1b
- MD5 dad11829d5dc7eaaffba76a0cec749c2
- SHA1 57abf55a6811571e654054c01a0cc945fe095016
- SHA512 f2ad22de37a3647ce9b9cc45a34c9691b4ebf9dbbfc01938aab4b54c0d54ae96c2dcd93e3d0515d1cb487197d7408b1431bc464f2d7f0b58edcf749aa9bf4529
- SSDEEP 6144:2rWKL+VhtCq4amGGGGG+pqKPcTZI94WvlQ:2rWKiXtCq4fOTZBWK
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Suspicious use of SetThreadContext