General
- Target setup.exe
- Size 216KB
- Sample230401-b4865sgd9t
- SHA256 156b372382e867155febf5a256b55eb77ecbba95cae36601eb48b07b302758b1
- MD5 32dedeabfb2fef26353a198da466903b
- SHA1 8e865cfeb63085ae6f6bdf1c2291bd6141de1a39
- SHA512 63e333bb5f45e127ef31f9fa101845cc12ac96fadaed12fdb7557a9ee389d5a9d588b95c5d3f8675c4dff58866e9f1800ee6cc5a709ee7a8f751307028d47474
- SSDEEP 3072:zBKyWpKAwMGbcdfMD7oeBExnsUn+1I8mmJmjrvCAJw5sMOrQ2f:8RKL1cdkD7Lun9+C6J0TpDMOrhf
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
setup.exe
Resource
win7-20230220-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
setup.exe
Resource
win10v2004-20230221-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
smokeloader
Botnet
-
lab
Extracted
Family
-
smokeloader
Version
-
2020
C2
-
http://host-file-host6.com/
-
http://host-host-file8.com/
rc4.i32
rc4.i32
Targets
-
- Target setup.exe
- Size 216KB
- SHA256 156b372382e867155febf5a256b55eb77ecbba95cae36601eb48b07b302758b1
- MD5 32dedeabfb2fef26353a198da466903b
- SHA1 8e865cfeb63085ae6f6bdf1c2291bd6141de1a39
- SHA512 63e333bb5f45e127ef31f9fa101845cc12ac96fadaed12fdb7557a9ee389d5a9d588b95c5d3f8675c4dff58866e9f1800ee6cc5a709ee7a8f751307028d47474
- SSDEEP 3072:zBKyWpKAwMGbcdfMD7oeBExnsUn+1I8mmJmjrvCAJw5sMOrQ2f:8RKL1cdkD7Lun9+C6J0TpDMOrhf
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Suspicious use of SetThreadContext