General
- Target setup.exe
- Size 293KB
- Sample230329-b3h9bsec56
- SHA256 668b3ed6f31fce4a65e5bf64bc17a92e1d9b40e8de7627508036cf6e111070bc
- MD5 80de2350870cc82e277f9b19c71e398d
- SHA1 cfafa1f2789b494c86d329370e28d7c29773600d
- SHA512 299d16184a5821405ab66a785a59a558effa5af23596dc5853926763fedd0421a0a012121b5e8790a1a0d309cf1c78ccd3480e218ceb4259a65c0d3a345e8db1
- SSDEEP 3072:iEJ/+k9A2BOlMG9qx494GRs1nhCmPQUJo7u9uG77u4Qc78ToWvQfo:/XtBuV9qDHRo2uuu4QcN
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
setup.exe
Resource
win7-20230220-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
setup.exe
Resource
win10v2004-20230220-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
smokeloader
Botnet
-
lab
Extracted
Family
-
smokeloader
Version
-
2020
C2
-
http://host-file-host6.com/
-
http://host-host-file8.com/
rc4.i32
rc4.i32
Targets
-
- Target setup.exe
- Size 293KB
- SHA256 668b3ed6f31fce4a65e5bf64bc17a92e1d9b40e8de7627508036cf6e111070bc
- MD5 80de2350870cc82e277f9b19c71e398d
- SHA1 cfafa1f2789b494c86d329370e28d7c29773600d
- SHA512 299d16184a5821405ab66a785a59a558effa5af23596dc5853926763fedd0421a0a012121b5e8790a1a0d309cf1c78ccd3480e218ceb4259a65c0d3a345e8db1
- SSDEEP 3072:iEJ/+k9A2BOlMG9qx494GRs1nhCmPQUJo7u9uG77u4Qc78ToWvQfo:/XtBuV9qDHRo2uuu4QcN
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Suspicious use of SetThreadContext