General
- Target setup.exe
- Size 232KB
- Sample230402-a4nd1afa61
- SHA256 aec8b80ca4b56ac949515aebb55ebd384b18bf9371287948bc646bdafd12f2d5
- MD5 088bda258f8e982ab30a5bca2831af40
- SHA1 d18d650f6adf6833a1ffbcbbc9efbb7a15b0baf6
- SHA512 ad9240d2232aa0075f00170e691cbd6a7c1656f1312764d9e3c2ed36de3edf92bf2622a3d102711524360f68efebe678b46bd521db40bcdb6820a473cbd93473
- SSDEEP 3072:UbDQAh2J/mz8TbIN96A2FF6J+fVE/3XGFibh4wFknuaVNYKp+xQHca:IAJeoTbIYtzREVQ
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
setup.exe
Resource
win7-20230220-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
setup.exe
Resource
win10v2004-20230220-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
smokeloader
Botnet
-
pub2
Extracted
Family
-
smokeloader
Version
-
2020
C2
-
http://host-file-host6.com/
-
http://host-host-file8.com/
rc4.i32
rc4.i32
Targets
-
- Target setup.exe
- Size 232KB
- SHA256 aec8b80ca4b56ac949515aebb55ebd384b18bf9371287948bc646bdafd12f2d5
- MD5 088bda258f8e982ab30a5bca2831af40
- SHA1 d18d650f6adf6833a1ffbcbbc9efbb7a15b0baf6
- SHA512 ad9240d2232aa0075f00170e691cbd6a7c1656f1312764d9e3c2ed36de3edf92bf2622a3d102711524360f68efebe678b46bd521db40bcdb6820a473cbd93473
- SSDEEP 3072:UbDQAh2J/mz8TbIN96A2FF6J+fVE/3XGFibh4wFknuaVNYKp+xQHca:IAJeoTbIYtzREVQ
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Suspicious use of SetThreadContext