General
- Target file.exe
- Size 325KB
- Sample230424-tgryfsch97
- SHA256 b8575c68058ec0f8ad9be38e9ddd88937fa7099fe216c6598777cfbcd240cacb
- MD5 0d16b13ba328db7a22b0243804b4bd98
- SHA1 ce3ac1789f41af233a285ad6488c4aacfc93fb20
- SHA512 f8cdf2d1447e59c822e8186c7c8b1a87053020582a41aa195b324e7add92cb96e18bd88e95acca28a1c0d9e0c23240cf938d5525ad57fc36985fd511296c9cae
- SSDEEP 6144:XsbQ5PQ1RmimMlFjqdw1yACGG2sUK+oRZtpBTV:XsbOimiTFIwM52sUK+gPpr
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20230220-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20230221-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
smokeloader
Botnet
-
pub1
Extracted
Family
-
smokeloader
Version
-
2020
C2
-
http://host-file-host6.com/
-
http://host-host-file8.com/
rc4.i32
rc4.i32
Targets
-
- Target file.exe
- Size 325KB
- SHA256 b8575c68058ec0f8ad9be38e9ddd88937fa7099fe216c6598777cfbcd240cacb
- MD5 0d16b13ba328db7a22b0243804b4bd98
- SHA1 ce3ac1789f41af233a285ad6488c4aacfc93fb20
- SHA512 f8cdf2d1447e59c822e8186c7c8b1a87053020582a41aa195b324e7add92cb96e18bd88e95acca28a1c0d9e0c23240cf938d5525ad57fc36985fd511296c9cae
- SSDEEP 6144:XsbQ5PQ1RmimMlFjqdw1yACGG2sUK+oRZtpBTV:XsbOimiTFIwM52sUK+gPpr
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Suspicious use of SetThreadContext