General
-
Target
setup.exe
-
Size
249KB
-
Sample
230401-cdt5zafc45
-
MD5
fee6d51c443d167ee734db48cffa4278
-
SHA1
e5f36e47864c013d08bb193ebb591ec6fa4344a6
-
SHA256
18995e846a35119d96ee0289476a954d486d82e17c4feff5a84a20d8f229b8eb
-
SHA512
2b9d70ba2b6f2a23df73aa2eb81134603f64c9469314340cc5edbf4e1849b18844fe0094e6f622e8d1979820ff2051541afe1c2071da98285ff22a80702203b9
-
SSDEEP
6144:1eKRglMJNUUFp7qpi1VNmgMG5cuPMth232+:4lMDUUFk06G5c7k2+
Static task
static1
Behavioral task
behavioral1
Sample
setup.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
setup.exe
Resource
win10v2004-20230220-en
Malware Config
Extracted
smokeloader
lab
Extracted
smokeloader
2020
http://host-file-host6.com/
http://host-host-file8.com/
Targets
-
-
Target
setup.exe
-
Size
249KB
-
MD5
fee6d51c443d167ee734db48cffa4278
-
SHA1
e5f36e47864c013d08bb193ebb591ec6fa4344a6
-
SHA256
18995e846a35119d96ee0289476a954d486d82e17c4feff5a84a20d8f229b8eb
-
SHA512
2b9d70ba2b6f2a23df73aa2eb81134603f64c9469314340cc5edbf4e1849b18844fe0094e6f622e8d1979820ff2051541afe1c2071da98285ff22a80702203b9
-
SSDEEP
6144:1eKRglMJNUUFp7qpi1VNmgMG5cuPMth232+:4lMDUUFk06G5c7k2+
Score10/10-
Executes dropped EXE
-
Suspicious use of SetThreadContext
-