General
- Target setup.exe
- Size 249KB
- Sample230401-ccp5mafc28
- SHA256 b6b7d973098b3f3d2f652cdae56c8b4f3f6380821b9f0056012c4969c93cce48
- MD5 c927c39d18ec8f4485f14be6a8f40bee
- SHA1 56c0cf9d022999902332b3211e91cd6f186fa2fe
- SHA512 567d22b375c3e39298ea1a6c2f4705d8d6effdd07e0e4f9630fb2d68974763ee991a9e1d534d2415338cdd0ff3b1505831b74ba37e47bae082e5c30a4dd88392
- SSDEEP 3072:45c4dFo7p8XS/hmcRTauGyOUJR7dj9RFvLmVqtCBg9NG6v:J4diWS/HlXl9/vyoJJ
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
setup.exe
Resource
win7-20230220-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
setup.exe
Resource
win10v2004-20230220-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
smokeloader
Botnet
-
lab
Extracted
Family
-
smokeloader
Version
-
2020
C2
-
http://host-file-host6.com/
-
http://host-host-file8.com/
rc4.i32
rc4.i32
Targets
-
- Target setup.exe
- Size 249KB
- SHA256 b6b7d973098b3f3d2f652cdae56c8b4f3f6380821b9f0056012c4969c93cce48
- MD5 c927c39d18ec8f4485f14be6a8f40bee
- SHA1 56c0cf9d022999902332b3211e91cd6f186fa2fe
- SHA512 567d22b375c3e39298ea1a6c2f4705d8d6effdd07e0e4f9630fb2d68974763ee991a9e1d534d2415338cdd0ff3b1505831b74ba37e47bae082e5c30a4dd88392
- SSDEEP 3072:45c4dFo7p8XS/hmcRTauGyOUJR7dj9RFvLmVqtCBg9NG6v:J4diWS/HlXl9/vyoJJ
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Suspicious use of SetThreadContext