General
- Target file.exe
- Size 273KB
- Sample230326-qcmldsgf25
- SHA256 210c955ea98aa1c1dc347afa8291867d0088d25014edd445bdc6640d034d22f5
- MD5 409a224494cfbfb53acda58d2d183da4
- SHA1 4013fb48f2ec7a412b4049c251c4ee4ed0795912
- SHA512 47435b9fcedf5eb5f76a9278222af51213fd7fd7ae8f6fe51b98602ec288a4a990dcd756f9797ad97c6e115415dc1eaaba5791f08dd987ecc6f574ecfdbdbc5b
- SSDEEP 3072:k3jUGhlvjuJpJK0zuggOuYOPbZyiBp8QorPKneJBsaH7cmU/XpNN4TJY:sbB0aggLEyeJBsaID/ZNN4T
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20230220-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20230220-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
smokeloader
Botnet
-
lab
Extracted
Family
-
smokeloader
Version
-
2020
C2
-
http://host-file-host6.com/
-
http://host-host-file8.com/
rc4.i32
rc4.i32
Targets
-
- Target file.exe
- Size 273KB
- SHA256 210c955ea98aa1c1dc347afa8291867d0088d25014edd445bdc6640d034d22f5
- MD5 409a224494cfbfb53acda58d2d183da4
- SHA1 4013fb48f2ec7a412b4049c251c4ee4ed0795912
- SHA512 47435b9fcedf5eb5f76a9278222af51213fd7fd7ae8f6fe51b98602ec288a4a990dcd756f9797ad97c6e115415dc1eaaba5791f08dd987ecc6f574ecfdbdbc5b
- SSDEEP 3072:k3jUGhlvjuJpJK0zuggOuYOPbZyiBp8QorPKneJBsaH7cmU/XpNN4TJY:sbB0aggLEyeJBsaID/ZNN4T
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Suspicious use of SetThreadContext