General
-
Target
3ca6ea3f4621da7fb952771589a37b2cb61a67c60b0662efbd3f52c12456a9d7
-
Size
160KB
-
Sample
230925-hkzlxsec87
-
MD5
bc9344256e1adf202b8fd092b88f7a93
-
SHA1
8de505436755455c3fdc391513ceaaffe4e53513
-
SHA256
c69767835a3481b9b8b99d73ef20c52f5837c7f684b673df8ce10d6b70b718dd
-
SHA512
b52f778b61585143b7b7adc8320e4ddc9e1abc42812748b9eb4cfc7c49e1b9ae65bf94ef0a4ab62d197860a813ff846e3a51c304086fb81d714f3f09bb36bf38
-
SSDEEP
3072:Auebg+NChddWl+BCRXQ6XVlYRTeKlyprKlaY/xCXnjVcdhgnBAKOQ:Aue4ddWlFRvX+8ruh/xcjVLneQ
Static task
static1
Behavioral task
behavioral1
Sample
3ca6ea3f4621da7fb952771589a37b2cb61a67c60b0662efbd3f52c12456a9d7.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
3ca6ea3f4621da7fb952771589a37b2cb61a67c60b0662efbd3f52c12456a9d7.exe
Resource
win10v2004-20230915-en
Malware Config
Extracted
smokeloader
2022
http://77.91.68.29/fks/
Targets
-
-
Target
3ca6ea3f4621da7fb952771589a37b2cb61a67c60b0662efbd3f52c12456a9d7
-
Size
270KB
-
MD5
631801b44d6199cd2e906f24b2194202
-
SHA1
e0f023e6a28bd28733e80a13e575e86e6f861406
-
SHA256
3ca6ea3f4621da7fb952771589a37b2cb61a67c60b0662efbd3f52c12456a9d7
-
SHA512
4e5c35031fb1e92fa311c2000355d36193041bf5f9aad067496ae06b6848fe1cb3c8b78b0edb640224993848844a0ce40cc55a40c8a5a9b1d93c224f768ddac1
-
SSDEEP
6144:TRKhrJ+j+5j68KsT6h/OCy5U9uAOGAs3LIAxqw6:TRUN+j+5+RsqGGut+Uw6
Score10/10-
Executes dropped EXE
-
Suspicious use of SetThreadContext
-