General
-
Target
setup.exe
-
Size
277KB
-
Sample
230325-ctklgaaf68
-
MD5
bff5833edbb3c929f51682bd8aab8e89
-
SHA1
deb4b26e4085ce94bf174ffe525a90996bd1e802
-
SHA256
f7430819576a8d9a67b3e1fa7a1f4247b9c42fd48ca5c242c76be13999270082
-
SHA512
627405994d382228c1c3e28dc9f90b8c1f7254f55c6980e6c841a41e0f15b26bbcb52eba7d95919bd7a6f3497d30fbaa694a167b09a41d546f81aaf99d90ed62
-
SSDEEP
3072:6o7z8e2BHiAqkUCwTsLMpMv0skZdvywr0XYrmVaMUvk0/pm2rH9WN8aeDr:zvFqJbMpMEbIVaMUc0vH9va
Static task
static1
Behavioral task
behavioral1
Sample
setup.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
setup.exe
Resource
win10v2004-20230220-en
Malware Config
Extracted
smokeloader
lab
Extracted
smokeloader
2020
http://host-file-host6.com/
http://host-host-file8.com/
Targets
-
-
Target
setup.exe
-
Size
277KB
-
MD5
bff5833edbb3c929f51682bd8aab8e89
-
SHA1
deb4b26e4085ce94bf174ffe525a90996bd1e802
-
SHA256
f7430819576a8d9a67b3e1fa7a1f4247b9c42fd48ca5c242c76be13999270082
-
SHA512
627405994d382228c1c3e28dc9f90b8c1f7254f55c6980e6c841a41e0f15b26bbcb52eba7d95919bd7a6f3497d30fbaa694a167b09a41d546f81aaf99d90ed62
-
SSDEEP
3072:6o7z8e2BHiAqkUCwTsLMpMv0skZdvywr0XYrmVaMUvk0/pm2rH9WN8aeDr:zvFqJbMpMEbIVaMUc0vH9va
Score10/10-
Suspicious use of SetThreadContext
-