General
- Target setup.exe
- Size 218KB
- Sample230402-a7hmxsfa8t
- SHA256 3839360d8e8a552ce9feb89f88bc276c85bfeb16b6a4a6021786e4a0ccf8dde1
- MD5 9565c4e50403f986850f3ac801c689e7
- SHA1 3549fd573035fd54230821ff5bdb946d30dd4ae3
- SHA512 53757379ebf287f80e05708e089847318557c7cf47018f1ec229de16681148ef5f98d94352b08884298cf986bc07ebb1c40fc9b32595f527c000145bcc356a39
- SSDEEP 3072:1QYiyN9drOpNNkXDZ0SdaSkvIt3MnBx0OnOpCFM+m/XbVwj5gruLarg:1eCdyy07SnyBxuonm/LVhKkg
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
setup.exe
Resource
win7-20230220-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
setup.exe
Resource
win10v2004-20230220-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
smokeloader
Botnet
-
lab
Extracted
Family
-
smokeloader
Version
-
2020
C2
-
http://host-file-host6.com/
-
http://host-host-file8.com/
rc4.i32
rc4.i32
Targets
-
- Target setup.exe
- Size 218KB
- SHA256 3839360d8e8a552ce9feb89f88bc276c85bfeb16b6a4a6021786e4a0ccf8dde1
- MD5 9565c4e50403f986850f3ac801c689e7
- SHA1 3549fd573035fd54230821ff5bdb946d30dd4ae3
- SHA512 53757379ebf287f80e05708e089847318557c7cf47018f1ec229de16681148ef5f98d94352b08884298cf986bc07ebb1c40fc9b32595f527c000145bcc356a39
- SSDEEP 3072:1QYiyN9drOpNNkXDZ0SdaSkvIt3MnBx0OnOpCFM+m/XbVwj5gruLarg:1eCdyy07SnyBxuonm/LVhKkg
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Suspicious use of SetThreadContext