General
- Target setup.exe
- Size 363KB
- Sample230323-bndqascf23
- SHA256 b3c38d2db008a9f4d300d49f6d2d572a49ca2ed74fb61443f1c78dc8aa79a437
- MD5 18a26b80d2a132512ec6b66c1e12a048
- SHA1 92523bbfdf3b01510e9d079f18bdcc8137024443
- SHA512 1542601124a02c6ecabd496e971732eca419bce9e66fdf05aef4c01b3ebe227154dea6143196d7c9cf789481947b78e500dd624d2d94074091f3cff3a36320d6
- SSDEEP 3072:QgrEaPOFiOAJtLnDYybyWNt9V/nt+EvKaNGLjQrIRpMqJ7:+W2yeeYEyaNsEypM
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
setup.exe
Resource
win7-20230220-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
setup.exe
Resource
win10v2004-20230220-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
smokeloader
Botnet
-
lab
Extracted
Family
-
smokeloader
Version
-
2020
C2
-
http://host-file-host6.com/
-
http://host-host-file8.com/
rc4.i32
rc4.i32
Targets
-
- Target setup.exe
- Size 363KB
- SHA256 b3c38d2db008a9f4d300d49f6d2d572a49ca2ed74fb61443f1c78dc8aa79a437
- MD5 18a26b80d2a132512ec6b66c1e12a048
- SHA1 92523bbfdf3b01510e9d079f18bdcc8137024443
- SHA512 1542601124a02c6ecabd496e971732eca419bce9e66fdf05aef4c01b3ebe227154dea6143196d7c9cf789481947b78e500dd624d2d94074091f3cff3a36320d6
- SSDEEP 3072:QgrEaPOFiOAJtLnDYybyWNt9V/nt+EvKaNGLjQrIRpMqJ7:+W2yeeYEyaNsEypM
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Suspicious use of SetThreadContext