General
- Target setup.exe
- Size 275KB
- Sample230327-bsdk4aah86
- SHA256 ff2349d0baa3d38b56f1251ad1299c07d9ebf947a38c6bce1122482ed4aa48c7
- MD5 2144c8e0d1460cdf01d0987db923b51b
- SHA1 e6deda28bc839e84ded290581e5a53c69b2be2b7
- SHA512 aec9bcbbe7d4b88ffc755fc71dd25976cebe0190d8d43ed32209bf60d0e140218a23468879b9d819d1bbc2fa255b1d3e705fad2f502153480cae76ccf18463a1
- SSDEEP 6144:6BTRXMOh6XFaUYsljv013RoSdl/mNN4T:6TRXNh6XFNYs5v013eSdYN
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
setup.exe
Resource
win7-20230220-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
setup.exe
Resource
win10v2004-20230220-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
smokeloader
Botnet
-
lab
Extracted
Family
-
smokeloader
Version
-
2020
C2
-
http://host-file-host6.com/
-
http://host-host-file8.com/
rc4.i32
rc4.i32
Targets
-
- Target setup.exe
- Size 275KB
- SHA256 ff2349d0baa3d38b56f1251ad1299c07d9ebf947a38c6bce1122482ed4aa48c7
- MD5 2144c8e0d1460cdf01d0987db923b51b
- SHA1 e6deda28bc839e84ded290581e5a53c69b2be2b7
- SHA512 aec9bcbbe7d4b88ffc755fc71dd25976cebe0190d8d43ed32209bf60d0e140218a23468879b9d819d1bbc2fa255b1d3e705fad2f502153480cae76ccf18463a1
- SSDEEP 6144:6BTRXMOh6XFaUYsljv013RoSdl/mNN4T:6TRXNh6XFNYs5v013eSdYN
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Suspicious use of SetThreadContext