General
- Target setup.exe
- Size 217KB
- Sample230401-b4n6zagd8z
- SHA256 7780027ffe04f23af940824b693e4bdfea9df5363d18afef36e2d08244e55dd5
- MD5 4270ab088c3f2ef45513afbe271f0a45
- SHA1 aa13a689c3b11acb770a4bb03307bd0d3ec28940
- SHA512 1448b6ac1472b04182df2a7440658b7b7755a6a4a0130053d1f90cbafa3ec358c1636813f6c60b0972aeab1010c2a9e70365609d4fd2c229f37d511b99044a62
- SSDEEP 3072:ZyyJncRzaa2xjf5xoR13uW6M+6UW5cVVst:08cl2xDYvuWsVVst
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
setup.exe
Resource
win7-20230220-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
setup.exe
Resource
win10v2004-20230220-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
smokeloader
Botnet
-
lab
Extracted
Family
-
smokeloader
Version
-
2020
C2
-
http://host-file-host6.com/
-
http://host-host-file8.com/
rc4.i32
rc4.i32
Targets
-
- Target setup.exe
- Size 217KB
- SHA256 7780027ffe04f23af940824b693e4bdfea9df5363d18afef36e2d08244e55dd5
- MD5 4270ab088c3f2ef45513afbe271f0a45
- SHA1 aa13a689c3b11acb770a4bb03307bd0d3ec28940
- SHA512 1448b6ac1472b04182df2a7440658b7b7755a6a4a0130053d1f90cbafa3ec358c1636813f6c60b0972aeab1010c2a9e70365609d4fd2c229f37d511b99044a62
- SSDEEP 3072:ZyyJncRzaa2xjf5xoR13uW6M+6UW5cVVst:08cl2xDYvuWsVVst
- MD5 SHA1 SHA512 SSDEEP
Score10/10Suspicious use of SetThreadContext