General
- Target setup.exe
- Size 189KB
- Sample230406-bmtp5acf3t
- SHA256 535efc7e7039d10bc61fdf9bdf67dd6d04f3136dfc9d64fcef4daef7480f23de
- MD5 754bfb6e26affa258c731c6dd1dadb75
- SHA1 e03f17d2740d27f32c7f619e983a6c1363514b50
- SHA512 ed713e974e4f80e1d9412cbf5e76b92b230b90fdfd4d9859f87235732a620655764467668dd5c0c040211702900c6ef0ecec7f7074bf80b5c2f9ad78e1c4abf0
- SSDEEP 1536:AhJrKChi9OCbR/kKEfnXupbkqjpQYTEVe4R3DOn5FUywNOJMM1jSGLDHj5zqzlTi:ArhQGnXMb5D/kyn2xl0D5zqZTY9TIx
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
setup.exe
Resource
win7-20230220-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
setup.exe
Resource
win10v2004-20230220-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
smokeloader
Botnet
-
pub1
Extracted
Family
-
smokeloader
Version
-
2020
C2
-
http://host-file-host6.com/
-
http://host-host-file8.com/
rc4.i32
rc4.i32
Targets
-
- Target setup.exe
- Size 189KB
- SHA256 535efc7e7039d10bc61fdf9bdf67dd6d04f3136dfc9d64fcef4daef7480f23de
- MD5 754bfb6e26affa258c731c6dd1dadb75
- SHA1 e03f17d2740d27f32c7f619e983a6c1363514b50
- SHA512 ed713e974e4f80e1d9412cbf5e76b92b230b90fdfd4d9859f87235732a620655764467668dd5c0c040211702900c6ef0ecec7f7074bf80b5c2f9ad78e1c4abf0
- SSDEEP 1536:AhJrKChi9OCbR/kKEfnXupbkqjpQYTEVe4R3DOn5FUywNOJMM1jSGLDHj5zqzlTi:ArhQGnXMb5D/kyn2xl0D5zqZTY9TIx
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Suspicious use of SetThreadContext