General
-
Target
setup.exe
-
Size
250KB
-
Sample
230401-cjemgagf4w
-
MD5
faadb95540403c9c9eca74ec60840270
-
SHA1
f56226ea87983e202ef8c860f2f5da1c2d88edb3
-
SHA256
c8703044d61f113ce8b037ffbdedb0f9303a3b40f1daacc7e998a4e340bc4676
-
SHA512
c3f3740144bc127b3a80d9916c5c3b1db43d7e04e97bfb06dfcd6024070f0f29d4750ffbf53ad67f73236651785061360564721e0ad35641399e5f651c640186
-
SSDEEP
3072:bL91z1FYjt8Xb3kRzv1OwkDmefN/8CF3hm2RL8dM2GyBpxwjmR+v:Xz1qib3XwkDmkN/TZhP8dlep
Static task
static1
Behavioral task
behavioral1
Sample
setup.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
setup.exe
Resource
win10v2004-20230220-en
Malware Config
Extracted
smokeloader
lab
Extracted
smokeloader
2020
http://host-file-host6.com/
http://host-host-file8.com/
Targets
-
-
Target
setup.exe
-
Size
250KB
-
MD5
faadb95540403c9c9eca74ec60840270
-
SHA1
f56226ea87983e202ef8c860f2f5da1c2d88edb3
-
SHA256
c8703044d61f113ce8b037ffbdedb0f9303a3b40f1daacc7e998a4e340bc4676
-
SHA512
c3f3740144bc127b3a80d9916c5c3b1db43d7e04e97bfb06dfcd6024070f0f29d4750ffbf53ad67f73236651785061360564721e0ad35641399e5f651c640186
-
SSDEEP
3072:bL91z1FYjt8Xb3kRzv1OwkDmefN/8CF3hm2RL8dM2GyBpxwjmR+v:Xz1qib3XwkDmkN/TZhP8dlep
Score10/10-
Suspicious use of SetThreadContext
-