General
- Target setup.exe
- Size 248KB
- Sample230330-a3333aca7t
- SHA256 9d56e843128da207aa63bacbd04b94c2928e2d409b0fd153e9715a4122cb7233
- MD5 da34ecc235609a0f0401882a9815e0a7
- SHA1 765d2708d9a916955af9c25642c8c64b29529ddd
- SHA512 26faa52f09b38969c9bbb029b20dce2b3cff06f2af55e394be92fa469af9a85a7beb27cfc217de6963884fd7ee111415417d01edf2cd7ea0aecbccb151988635
- SSDEEP 3072:HL9at9KJ8Xg2MX1Le64xgFUuywMNXq/x1kT5GSieluziI/Od4p7EnFUx:Bavhg2MFLe69FUDtNqxK617UFU
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
setup.exe
Resource
win7-20230220-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
setup.exe
Resource
win10v2004-20230220-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
smokeloader
Botnet
-
lab
Extracted
Family
-
smokeloader
Version
-
2020
C2
-
http://host-file-host6.com/
-
http://host-host-file8.com/
rc4.i32
rc4.i32
Targets
-
- Target setup.exe
- Size 248KB
- SHA256 9d56e843128da207aa63bacbd04b94c2928e2d409b0fd153e9715a4122cb7233
- MD5 da34ecc235609a0f0401882a9815e0a7
- SHA1 765d2708d9a916955af9c25642c8c64b29529ddd
- SHA512 26faa52f09b38969c9bbb029b20dce2b3cff06f2af55e394be92fa469af9a85a7beb27cfc217de6963884fd7ee111415417d01edf2cd7ea0aecbccb151988635
- SSDEEP 3072:HL9at9KJ8Xg2MX1Le64xgFUuywMNXq/x1kT5GSieluziI/Od4p7EnFUx:Bavhg2MFLe69FUDtNqxK617UFU
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Suspicious use of SetThreadContext