General
- Target setup.exe
- Size 226KB
- Sample230422-bdtc1abd39
- SHA256 cf0c8fb5107e1050a82bceac1996d5e5e8ccbac9026996bbbb463b15075b61f0
- MD5 fdf52f22136ba739df08c52c94d81f1c
- SHA1 30c613fd4b59b6dd3df93eba626fb492ad286ae1
- SHA512 e222a42f5c22b8191cfeb9f87363b084e3480873780fcf55f26a21cd097820edc9c784b40d34aca6536dc5df88e4b8bf5ef3078aeadfb4e9654cd5e2f9435b17
- SSDEEP 3072:faN+y8bdCBl/sGa+OiA82t5vg2JUNXV45H/hELJF:yN+fdiPr5Al/g2JGo/hC
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
setup.exe
Resource
win7-20230220-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
setup.exe
Resource
win10v2004-20230220-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
smokeloader
Botnet
-
pub1
Extracted
Family
-
smokeloader
Version
-
2020
C2
-
http://host-file-host6.com/
-
http://host-host-file8.com/
rc4.i32
rc4.i32
Targets
-
- Target setup.exe
- Size 226KB
- SHA256 cf0c8fb5107e1050a82bceac1996d5e5e8ccbac9026996bbbb463b15075b61f0
- MD5 fdf52f22136ba739df08c52c94d81f1c
- SHA1 30c613fd4b59b6dd3df93eba626fb492ad286ae1
- SHA512 e222a42f5c22b8191cfeb9f87363b084e3480873780fcf55f26a21cd097820edc9c784b40d34aca6536dc5df88e4b8bf5ef3078aeadfb4e9654cd5e2f9435b17
- SSDEEP 3072:faN+y8bdCBl/sGa+OiA82t5vg2JUNXV45H/hELJF:yN+fdiPr5Al/g2JGo/hC
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Suspicious use of SetThreadContext