General
- Target setup.exe
- Size 213KB
- Sample230412-axcc6agd47
- SHA256 954a2b32a088ec729d059b519adadbd5520a348cd99cb4b2952c814be0aa698a
- MD5 ff2a63d9c945c595362135736c9fd41b
- SHA1 b6208a6a797ab177b2c91d911591501016700310
- SHA512 6c5219631bec0e428f908b62dd10606bfbb3543e3b4bde8055194f695da919fc4f81f07cd3131d3ea082ba3f5709d5f86f78f9f86f97e9bb0bbca3faff1d2492
- SSDEEP 3072:mZPW+cOjsAmmb181JCzc90qSph8IZcUfgmAqdp+O615Nc6JD:6u+cYmmbe1IAOqSpvtTzp+J1c65
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
setup.exe
Resource
win7-20230220-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
setup.exe
Resource
win10v2004-20230220-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
smokeloader
Botnet
-
pub1
Extracted
Family
-
smokeloader
Version
-
2020
C2
-
http://host-file-host6.com/
-
http://host-host-file8.com/
rc4.i32
rc4.i32
Targets
-
- Target setup.exe
- Size 213KB
- SHA256 954a2b32a088ec729d059b519adadbd5520a348cd99cb4b2952c814be0aa698a
- MD5 ff2a63d9c945c595362135736c9fd41b
- SHA1 b6208a6a797ab177b2c91d911591501016700310
- SHA512 6c5219631bec0e428f908b62dd10606bfbb3543e3b4bde8055194f695da919fc4f81f07cd3131d3ea082ba3f5709d5f86f78f9f86f97e9bb0bbca3faff1d2492
- SSDEEP 3072:mZPW+cOjsAmmb181JCzc90qSph8IZcUfgmAqdp+O615Nc6JD:6u+cYmmbe1IAOqSpvtTzp+J1c65
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Suspicious use of SetThreadContext