General
-
Target
fdb94b2da6f3244e4c0d2b2df8d50e03ed6b274e629fe9eabadce8cd75f07f7f
-
Size
223KB
-
Sample
230329-bc6a6seb53
-
MD5
2137d056cfa62ac349ec9cb3d8e7ef71
-
SHA1
d3d12c33ca97db55b19fd9472a796bfdaec26202
-
SHA256
fdb94b2da6f3244e4c0d2b2df8d50e03ed6b274e629fe9eabadce8cd75f07f7f
-
SHA512
571665afba4693c2fedb75cc163d1f3708856e37b1a0565f477ddd56cb5445928dcae8129b66a6d868b443cf23f5345118f62c4e8ef83a512d21070c9f2c9801
-
SSDEEP
3072:/jjpRHoKZZPCN1wqb2ty9ptC0T0JjE8KEeayGI+HIgQXVMyGsY:7vLmN92COE8IayGTHI8
Static task
static1
Behavioral task
behavioral1
Sample
fdb94b2da6f3244e4c0d2b2df8d50e03ed6b274e629fe9eabadce8cd75f07f7f.exe
Resource
win10-20230220-en
Malware Config
Extracted
smokeloader
lab
Extracted
smokeloader
2020
http://host-file-host6.com/
http://host-host-file8.com/
Targets
-
-
Target
fdb94b2da6f3244e4c0d2b2df8d50e03ed6b274e629fe9eabadce8cd75f07f7f
-
Size
223KB
-
MD5
2137d056cfa62ac349ec9cb3d8e7ef71
-
SHA1
d3d12c33ca97db55b19fd9472a796bfdaec26202
-
SHA256
fdb94b2da6f3244e4c0d2b2df8d50e03ed6b274e629fe9eabadce8cd75f07f7f
-
SHA512
571665afba4693c2fedb75cc163d1f3708856e37b1a0565f477ddd56cb5445928dcae8129b66a6d868b443cf23f5345118f62c4e8ef83a512d21070c9f2c9801
-
SSDEEP
3072:/jjpRHoKZZPCN1wqb2ty9ptC0T0JjE8KEeayGI+HIgQXVMyGsY:7vLmN92COE8IayGTHI8
Score10/10-
Deletes itself
-
Suspicious use of SetThreadContext
-