General
- Target file.exe
- Size 248KB
- Sample230323-dfk6hsdb75
- SHA256 c8914f248385ff7eadb10ce1429e014d6fa8d2b85dc6eb55bd7e7da4eee42d3e
- MD5 32d38efb3beb3a1cb63b572bf9c43076
- SHA1 635e29559e6652be6fb65ac3c656f2722cb15db6
- SHA512 33c8a553139d0cc1cd55268d3bc793001fa7f9269a49c7dd8d1bf1bc8c0751c8565ffdb09854fcd647c1d0fde27f89a033357f6182ed9f76583e0ddcec89fb76
- SSDEEP 3072:tHQQqSOWvDv4di4NEhunCVUTypQ/FjogjY91vOL4gW1riy+yQ9ruMk+Ma:qRUDGfNLqUnSJFrxQAbn
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20230220-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20230221-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
smokeloader
Botnet
-
lab
Extracted
Family
-
smokeloader
Version
-
2020
C2
-
http://host-file-host6.com/
-
http://host-host-file8.com/
rc4.i32
rc4.i32
Targets
-
- Target file.exe
- Size 248KB
- SHA256 c8914f248385ff7eadb10ce1429e014d6fa8d2b85dc6eb55bd7e7da4eee42d3e
- MD5 32d38efb3beb3a1cb63b572bf9c43076
- SHA1 635e29559e6652be6fb65ac3c656f2722cb15db6
- SHA512 33c8a553139d0cc1cd55268d3bc793001fa7f9269a49c7dd8d1bf1bc8c0751c8565ffdb09854fcd647c1d0fde27f89a033357f6182ed9f76583e0ddcec89fb76
- SSDEEP 3072:tHQQqSOWvDv4di4NEhunCVUTypQ/FjogjY91vOL4gW1riy+yQ9ruMk+Ma:qRUDGfNLqUnSJFrxQAbn
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Suspicious use of SetThreadContext