General
- Target setup.exe
- Size 249KB
- Sample230330-axcc6aad56
- SHA256 01e45abb29d308bb9402e7a7509bbd39fcf51fae5962fb40fcd13a04b6a87afd
- MD5 363fe2a2f81e70d676809132e83c5320
- SHA1 1a969aee5858b4196d08c684abf983944c8b0fb3
- SHA512 fa60fa073b43de831973daf14edb350100b989f994de340984bfcf045faa8207e36314283541edd6ab55f0fb6f29ad6e4c799586c1bf124f7019ec42fcbd4058
- SSDEEP 3072:Ib7i8FXgN8XvlsEILOoPnhoDyfaOoPAZN3Egr7lee3CB4dw4xAr:G+853vlsRLO4hEUaOoPkrrHvS
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
setup.exe
Resource
win7-20230220-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
setup.exe
Resource
win10v2004-20230220-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
smokeloader
Botnet
-
lab
Extracted
Family
-
smokeloader
Version
-
2020
C2
-
http://host-file-host6.com/
-
http://host-host-file8.com/
rc4.i32
rc4.i32
Targets
-
- Target setup.exe
- Size 249KB
- SHA256 01e45abb29d308bb9402e7a7509bbd39fcf51fae5962fb40fcd13a04b6a87afd
- MD5 363fe2a2f81e70d676809132e83c5320
- SHA1 1a969aee5858b4196d08c684abf983944c8b0fb3
- SHA512 fa60fa073b43de831973daf14edb350100b989f994de340984bfcf045faa8207e36314283541edd6ab55f0fb6f29ad6e4c799586c1bf124f7019ec42fcbd4058
- SSDEEP 3072:Ib7i8FXgN8XvlsEILOoPnhoDyfaOoPAZN3Egr7lee3CB4dw4xAr:G+853vlsRLO4hEUaOoPkrrHvS
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Suspicious use of SetThreadContext