General
- Target file.exe
- Size 235KB
- Sample230419-redxpscg7t
- SHA256 db3b7bda2ba6f35cd7fc537166743a2b92d22a19e28fc3b067e5de090dd31ab4
- MD5 b837dfae19cc1b86f4174be20aa88a68
- SHA1 5c06f025478cf208989d4619e271cfa2ff985c26
- SHA512 44a0050b772f971a8d15d6fe6749183850b2021fafce9da03f747a7887fad02ba9bc5e8685319078a977134648d7efc9bf4e50e0fe75688651b2e722f7f35319
- SSDEEP 3072:x7qZBfHDoWnz2srA4JqK3FbTPRAUenyp65/OuwYPDpJKJRfGI:4ZBboAw4JqMFbj23n9O3YPDWJ
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20230220-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20230220-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
smokeloader
Botnet
-
pub1
Extracted
Family
-
smokeloader
Version
-
2020
C2
-
http://host-file-host6.com/
-
http://host-host-file8.com/
rc4.i32
rc4.i32
Targets
-
- Target file.exe
- Size 235KB
- SHA256 db3b7bda2ba6f35cd7fc537166743a2b92d22a19e28fc3b067e5de090dd31ab4
- MD5 b837dfae19cc1b86f4174be20aa88a68
- SHA1 5c06f025478cf208989d4619e271cfa2ff985c26
- SHA512 44a0050b772f971a8d15d6fe6749183850b2021fafce9da03f747a7887fad02ba9bc5e8685319078a977134648d7efc9bf4e50e0fe75688651b2e722f7f35319
- SSDEEP 3072:x7qZBfHDoWnz2srA4JqK3FbTPRAUenyp65/OuwYPDpJKJRfGI:4ZBboAw4JqMFbj23n9O3YPDWJ
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Suspicious use of SetThreadContext