General
-
Target
setup.exe
-
Size
296KB
-
Sample
230329-cbjw8aga8t
-
MD5
bdfa203e8e4e627fa880a19bcc47a608
-
SHA1
c638dfaf4ca653123139ae300a3ad2e5585294af
-
SHA256
a7c93ad768ca71ba422bf5e8771668b3c85450c0747ecdcdb8785a84a99b3548
-
SHA512
0df58c002fe95641b06058301ca656eb5311cbb0e86593e305d6fab84f89cb8dd467dd2ce8f052b83b8d5bc47ef4463fffa66a5e554e10202988b00c8d0a24ad
-
SSDEEP
3072:dxQZ4YEv4bVS2yJmhTeyMu3TAy6OPBXQ1Kpax6e0Ayhk4AndTOWvQfu:bvt4bVAmhN6gyxGAya4
Static task
static1
Behavioral task
behavioral1
Sample
setup.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
setup.exe
Resource
win10v2004-20230220-en
Malware Config
Extracted
smokeloader
lab
Extracted
smokeloader
2020
http://host-file-host6.com/
http://host-host-file8.com/
Targets
-
-
Target
setup.exe
-
Size
296KB
-
MD5
bdfa203e8e4e627fa880a19bcc47a608
-
SHA1
c638dfaf4ca653123139ae300a3ad2e5585294af
-
SHA256
a7c93ad768ca71ba422bf5e8771668b3c85450c0747ecdcdb8785a84a99b3548
-
SHA512
0df58c002fe95641b06058301ca656eb5311cbb0e86593e305d6fab84f89cb8dd467dd2ce8f052b83b8d5bc47ef4463fffa66a5e554e10202988b00c8d0a24ad
-
SSDEEP
3072:dxQZ4YEv4bVS2yJmhTeyMu3TAy6OPBXQ1Kpax6e0Ayhk4AndTOWvQfu:bvt4bVAmhN6gyxGAya4
Score10/10-
Suspicious use of SetThreadContext
-