General
-
Target
8fc020321d73b1e12951ca6efc774ba7bc745a2593c252ba04b1b48cd3e71118
-
Size
298KB
-
Sample
230915-jvjtwscc93
-
MD5
3d5e96c51d65e852c111858e5e23b7ce
-
SHA1
240f319490763824adf214eea6d41c943a02f243
-
SHA256
8fc020321d73b1e12951ca6efc774ba7bc745a2593c252ba04b1b48cd3e71118
-
SHA512
5d785c5568eb2ea2daf67b089fb53002fb997bbd67051210cb006727a7a46a80fbb3181e3cd21198cce7420f587f4251f3bcc0f58514f7ebc1e60a80023273b0
-
SSDEEP
3072:gy4OPh0mXQOjxew49zfBGryVJqkKaCAbJhmbmy+IiEwNYnNEYu07v:b4OP7XQOjAwY56yykKa7Jhk5+N
Static task
static1
Behavioral task
behavioral1
Sample
8fc020321d73b1e12951ca6efc774ba7bc745a2593c252ba04b1b48cd3e71118.exe
Resource
win10-20230831-en
Malware Config
Extracted
smokeloader
pub1
Extracted
smokeloader
2020
http://host-file-host6.com/
http://host-host-file8.com/
Targets
-
-
Target
8fc020321d73b1e12951ca6efc774ba7bc745a2593c252ba04b1b48cd3e71118
-
Size
298KB
-
MD5
3d5e96c51d65e852c111858e5e23b7ce
-
SHA1
240f319490763824adf214eea6d41c943a02f243
-
SHA256
8fc020321d73b1e12951ca6efc774ba7bc745a2593c252ba04b1b48cd3e71118
-
SHA512
5d785c5568eb2ea2daf67b089fb53002fb997bbd67051210cb006727a7a46a80fbb3181e3cd21198cce7420f587f4251f3bcc0f58514f7ebc1e60a80023273b0
-
SSDEEP
3072:gy4OPh0mXQOjxew49zfBGryVJqkKaCAbJhmbmy+IiEwNYnNEYu07v:b4OP7XQOjAwY56yykKa7Jhk5+N
Score10/10-
Deletes itself
-
Executes dropped EXE
-
Suspicious use of SetThreadContext
-