General
- Target file.exe
- Size 275KB
- Sample230325-k16fhsca34
- SHA256 31171cd615276adb35df2f4ea7a68cd79fcf92d71f694fc64d88911628e0c849
- MD5 caa82920f1abdc2fd94012351f205003
- SHA1 c699e0561909636b7b6d8b894b44154006d3b5e6
- SHA512 a0036afaa5b229a434bd444e5dbacfc816205377f277c6a231123d4cd489f8fc58ea8354cf75ddb1292b351e2a021b13b2259e37f1cd6e6199cf2c7190dc9076
- SSDEEP 3072:zvGzb/26LihNP0CHWAips7D9mnTg9Lvo6kTu+s9aRj1oXS+gACJQN0f5KRh:LejN6Tips8Mbo6SpJ+ChfTfm
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20230220-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20230221-en
10 signatures
150 seconds
Malware Config
Extracted
Family
-
smokeloader
Botnet
-
lab
Extracted
Family
-
smokeloader
Version
-
2020
C2
-
http://host-file-host6.com/
-
http://host-host-file8.com/
rc4.i32
rc4.i32
Targets
-
- Target file.exe
- Size 275KB
- SHA256 31171cd615276adb35df2f4ea7a68cd79fcf92d71f694fc64d88911628e0c849
- MD5 caa82920f1abdc2fd94012351f205003
- SHA1 c699e0561909636b7b6d8b894b44154006d3b5e6
- SHA512 a0036afaa5b229a434bd444e5dbacfc816205377f277c6a231123d4cd489f8fc58ea8354cf75ddb1292b351e2a021b13b2259e37f1cd6e6199cf2c7190dc9076
- SSDEEP 3072:zvGzb/26LihNP0CHWAips7D9mnTg9Lvo6kTu+s9aRj1oXS+gACJQN0f5KRh:LejN6Tips8Mbo6SpJ+ChfTfm
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Suspicious use of SetThreadContext