General
- Target setup.exe
- Size 273KB
- Sample230327-b1tmaaba56
- SHA256 0abfa054de14518b7f5538ea5052448548a5758ee3dc648124feb53dde49dfd3
- MD5 6fd8eefe394a44ec3e32294dca17b58e
- SHA1 2f05ad7e05c99576bb47af4eba72a59a22d0a2dc
- SHA512 9dc3913ed8bc796a6c7327384f37df6898d77fa728eacc43a808928a6ccb4de4220f09f82e0fe65a9b0d151e45329c76f305c608cfb5a9e6b5fbb59f69d3669f
- SSDEEP 3072:tSLTz8rL5hv9uDOCXlXrwGFHmio9CQ78PlRiQEy+UzVYKpN87jRjM/XZFcDsCJQO:Y9BlXrNFGio9Ud0QLVN83FMBFcfTfz
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
setup.exe
Resource
win7-20230220-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
setup.exe
Resource
win10v2004-20230220-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
smokeloader
Botnet
-
lab
Extracted
Family
-
smokeloader
Version
-
2020
C2
-
http://host-file-host6.com/
-
http://host-host-file8.com/
rc4.i32
rc4.i32
Targets
-
- Target setup.exe
- Size 273KB
- SHA256 0abfa054de14518b7f5538ea5052448548a5758ee3dc648124feb53dde49dfd3
- MD5 6fd8eefe394a44ec3e32294dca17b58e
- SHA1 2f05ad7e05c99576bb47af4eba72a59a22d0a2dc
- SHA512 9dc3913ed8bc796a6c7327384f37df6898d77fa728eacc43a808928a6ccb4de4220f09f82e0fe65a9b0d151e45329c76f305c608cfb5a9e6b5fbb59f69d3669f
- SSDEEP 3072:tSLTz8rL5hv9uDOCXlXrwGFHmio9CQ78PlRiQEy+UzVYKpN87jRjM/XZFcDsCJQO:Y9BlXrNFGio9Ud0QLVN83FMBFcfTfz
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Suspicious use of SetThreadContext