General
- Target setup.exe
- Size 248KB
- Sample230330-a73yvsad86
- SHA256 c0963c6bcc7e76b68c50177807d843dcb43aa58b2ad67bb8d7d3689f4ee00143
- MD5 61f9a1d18a0c61a1c2cb999c8b27f62e
- SHA1 a18eb6ea843f780cd364844e553a6d7eba573ccb
- SHA512 3e6cc267f773b69d2427c1b743cb994ac954162a999b303af0d6ee50d03f8341d8b36bcec57cf1e36529c98cbe90269de40c4bf0ad72a59705107637a457a27d
- SSDEEP 3072:z3PSzkpQ0Y8XPD193LBWwl6Of1p1QRrllZZx2IurU/r0Ewt483Zph:GzkKuPD1JLBn6ONpgPxuG0E+3
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
setup.exe
Resource
win7-20230220-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
setup.exe
Resource
win10v2004-20230220-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
smokeloader
Botnet
-
lab
Extracted
Family
-
smokeloader
Version
-
2020
C2
-
http://host-file-host6.com/
-
http://host-host-file8.com/
rc4.i32
rc4.i32
Targets
-
- Target setup.exe
- Size 248KB
- SHA256 c0963c6bcc7e76b68c50177807d843dcb43aa58b2ad67bb8d7d3689f4ee00143
- MD5 61f9a1d18a0c61a1c2cb999c8b27f62e
- SHA1 a18eb6ea843f780cd364844e553a6d7eba573ccb
- SHA512 3e6cc267f773b69d2427c1b743cb994ac954162a999b303af0d6ee50d03f8341d8b36bcec57cf1e36529c98cbe90269de40c4bf0ad72a59705107637a457a27d
- SSDEEP 3072:z3PSzkpQ0Y8XPD193LBWwl6Of1p1QRrllZZx2IurU/r0Ewt483Zph:GzkKuPD1JLBn6ONpgPxuG0E+3
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Suspicious use of SetThreadContext