General
- Target b50ac4613ff111682cc4127b74ad054a.exe
- Size 352KB
- Sample230418-r5ab7scb22
- SHA256 ca8e2744569cfd770bf26517e46dd082fece779e43752f58e30d8465a9c91f73
- MD5 b50ac4613ff111682cc4127b74ad054a
- SHA1 81350b2769f8662c07db2914850d82d7aa22fbf6
- SHA512 2dd69f50257be159cca4cc6df801af5371ac3e67addbf8395fccaab5bedbb98a7e75e8f8999c2e204abc889d3d879d9438f26be7436052afeb2904703d51808b
- SSDEEP 3072:tWTHCoQsBetpppJ0xuhzTFM7IFR7c65BUrBBrqef1PC1M+/LzyH8zcme2Yvjw5dR:6i8ipsxSvFY9VlNC1MCztfIAamIv
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
b50ac4613ff111682cc4127b74ad054a.exe
Resource
win7-20230220-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
b50ac4613ff111682cc4127b74ad054a.exe
Resource
win10v2004-20230221-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
smokeloader
Botnet
-
pu10
Extracted
Family
-
smokeloader
Version
-
2020
C2
-
http://host-file-host6.com/
-
http://host-host-file8.com/
rc4.i32
rc4.i32
Targets
-
- Target b50ac4613ff111682cc4127b74ad054a.exe
- Size 352KB
- SHA256 ca8e2744569cfd770bf26517e46dd082fece779e43752f58e30d8465a9c91f73
- MD5 b50ac4613ff111682cc4127b74ad054a
- SHA1 81350b2769f8662c07db2914850d82d7aa22fbf6
- SHA512 2dd69f50257be159cca4cc6df801af5371ac3e67addbf8395fccaab5bedbb98a7e75e8f8999c2e204abc889d3d879d9438f26be7436052afeb2904703d51808b
- SSDEEP 3072:tWTHCoQsBetpppJ0xuhzTFM7IFR7c65BUrBBrqef1PC1M+/LzyH8zcme2Yvjw5dR:6i8ipsxSvFY9VlNC1MCztfIAamIv
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Suspicious use of SetThreadContext