General
- Target setup.exe
- Size 217KB
- Sample230401-bsyw2afa48
- SHA256 abbf99f9a1827660194f02485a1d1e9fd7f4eecff8021c7c56d4e8e2619e1061
- MD5 02abb21888be25dd60807492d9db52e5
- SHA1 c105036d7e6f25a4827e5ac40a68ca904b2eedf9
- SHA512 be14647bfce46a3fb374b0905d3578fcb8d908c7f241e1474ddd0130a79b8a60b49fb19f24959ea4ba97f735bf21492aef20dbf0cc4df95de49b96ecbeeb6c37
- SSDEEP 3072:ZLNyFFKsI1N32s7kFjVkJN5q6lpq22NHK2bj5gPI9+tQk/ii:X+K7GdRVYNFlWNq26PI9+tQkKi
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
setup.exe
Resource
win7-20230220-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
setup.exe
Resource
win10v2004-20230220-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
smokeloader
Botnet
-
lab
Extracted
Family
-
smokeloader
Version
-
2020
C2
-
http://host-file-host6.com/
-
http://host-host-file8.com/
rc4.i32
rc4.i32
Targets
-
- Target setup.exe
- Size 217KB
- SHA256 abbf99f9a1827660194f02485a1d1e9fd7f4eecff8021c7c56d4e8e2619e1061
- MD5 02abb21888be25dd60807492d9db52e5
- SHA1 c105036d7e6f25a4827e5ac40a68ca904b2eedf9
- SHA512 be14647bfce46a3fb374b0905d3578fcb8d908c7f241e1474ddd0130a79b8a60b49fb19f24959ea4ba97f735bf21492aef20dbf0cc4df95de49b96ecbeeb6c37
- SSDEEP 3072:ZLNyFFKsI1N32s7kFjVkJN5q6lpq22NHK2bj5gPI9+tQk/ii:X+K7GdRVYNFlWNq26PI9+tQkKi
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Suspicious use of SetThreadContext