General
- Target setup.exe
- Size 225KB
- Sample230331-bgna6ahd7v
- SHA256 3ba5ead63f225ea7c7240cbbff12b0cfaf21083b9eeb2ef2d78fa3c282f7a17d
- MD5 69553a30eb4fd9a6346e8584d8297db6
- SHA1 f932673e80e2447c41c20b738da81cf416ced97d
- SHA512 c86934c86945a88d6b3cf8e82fe4ad6da59506aa0a10ed8aff39e3f7f4fba1e58c3429e16025acbe03ee8040c84908043067a6ac44a9f04d829ec88479e20697
- SSDEEP 3072:zl0tkXbfvi2Yt+WuXaq7EIiL8mJGzvbLqYZCGlADnpWgQKnu9HWZJRUQBr4ksIYo:ZZL3wHuVvzvb1ZCGlAjwgQ0S2ZJtB
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
setup.exe
Resource
win7-20230220-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
setup.exe
Resource
win10v2004-20230220-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
smokeloader
Botnet
-
lab
Extracted
Family
-
smokeloader
Version
-
2020
C2
-
http://host-file-host6.com/
-
http://host-host-file8.com/
rc4.i32
rc4.i32
Targets
-
- Target setup.exe
- Size 225KB
- SHA256 3ba5ead63f225ea7c7240cbbff12b0cfaf21083b9eeb2ef2d78fa3c282f7a17d
- MD5 69553a30eb4fd9a6346e8584d8297db6
- SHA1 f932673e80e2447c41c20b738da81cf416ced97d
- SHA512 c86934c86945a88d6b3cf8e82fe4ad6da59506aa0a10ed8aff39e3f7f4fba1e58c3429e16025acbe03ee8040c84908043067a6ac44a9f04d829ec88479e20697
- SSDEEP 3072:zl0tkXbfvi2Yt+WuXaq7EIiL8mJGzvbLqYZCGlADnpWgQKnu9HWZJRUQBr4ksIYo:ZZL3wHuVvzvb1ZCGlAjwgQ0S2ZJtB
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Suspicious use of SetThreadContext