General
- Target setup.exe
- Size 218KB
- Sample230401-bsdk4afa44
- SHA256 84261828f66d19d65675a545dc4c3ee88b78ef8b75352520425167623698c249
- MD5 e1be7c5955ba037794edb57bf987cf44
- SHA1 915f9471e1898a22fd30c38062d7bee37ec0e1df
- SHA512 596ba5045df66f484b1cf32ec5e795a2f7c96673f3112b4d372b5c6a45e624a1e645daa49a24843fe5ea18964af49cd3a29a65e0df6919ab7c35482ad137f896
- SSDEEP 3072:feaLyLAlxfPZNkZmHM02dAtt+esOlKHBInQCZ5FljHOj5gKii:fP6exPHHaYt+eFlkB41Z5PbfKii
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
setup.exe
Resource
win7-20230220-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
setup.exe
Resource
win10v2004-20230220-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
smokeloader
Botnet
-
lab
Extracted
Family
-
smokeloader
Version
-
2020
C2
-
http://host-file-host6.com/
-
http://host-host-file8.com/
rc4.i32
rc4.i32
Targets
-
- Target setup.exe
- Size 218KB
- SHA256 84261828f66d19d65675a545dc4c3ee88b78ef8b75352520425167623698c249
- MD5 e1be7c5955ba037794edb57bf987cf44
- SHA1 915f9471e1898a22fd30c38062d7bee37ec0e1df
- SHA512 596ba5045df66f484b1cf32ec5e795a2f7c96673f3112b4d372b5c6a45e624a1e645daa49a24843fe5ea18964af49cd3a29a65e0df6919ab7c35482ad137f896
- SSDEEP 3072:feaLyLAlxfPZNkZmHM02dAtt+esOlKHBInQCZ5FljHOj5gKii:fP6exPHHaYt+eFlkB41Z5PbfKii
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Suspicious use of SetThreadContext