General
- Target file.exe
- Size 273KB
- Sample230326-az78lsgh4s
- SHA256 b4cc50dfd7c1734226f0eaee8869d660e7a7bd1c061b4af0ef91a396d76969a8
- MD5 55ba7699d0cdf95bb05571d736cbcbb3
- SHA1 c3041d86addb72ab3bd8ecbec81c4635920f82e9
- SHA512 32e0e9d40c7565d60a1d4caf50a8d2825db06c8c703d7df8a35bc8d002337b31f5b8755c3531275653fda210faceb60481cc89197e9a71ec59b580bcf09b4996
- SSDEEP 3072:9OBTzY0B+6z9b2SlwiGshfqaA5i7/dfi5COaxueMUH8cGql1wzOOgRNCJQN0fm2X:uHJw3sRqaAEfybPUH+wYeOTfz
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20230220-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20230220-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
smokeloader
Botnet
-
lab
Extracted
Family
-
smokeloader
Version
-
2020
C2
-
http://host-file-host6.com/
-
http://host-host-file8.com/
rc4.i32
rc4.i32
Targets
-
- Target file.exe
- Size 273KB
- SHA256 b4cc50dfd7c1734226f0eaee8869d660e7a7bd1c061b4af0ef91a396d76969a8
- MD5 55ba7699d0cdf95bb05571d736cbcbb3
- SHA1 c3041d86addb72ab3bd8ecbec81c4635920f82e9
- SHA512 32e0e9d40c7565d60a1d4caf50a8d2825db06c8c703d7df8a35bc8d002337b31f5b8755c3531275653fda210faceb60481cc89197e9a71ec59b580bcf09b4996
- SSDEEP 3072:9OBTzY0B+6z9b2SlwiGshfqaA5i7/dfi5COaxueMUH8cGql1wzOOgRNCJQN0fm2X:uHJw3sRqaAEfybPUH+wYeOTfz
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Suspicious use of SetThreadContext