General
-
Target
toolspub2.exe
-
Size
190KB
-
Sample
231012-q3sv4ace8w
-
MD5
a137245d8bc8109c4bc3df6e2b37d327
-
SHA1
ed8973e65b2aacb60683787831de37e7c805fa6c
-
SHA256
f342950ea78a3910911df852de530912090acea09b895e299d4ba0132ee146ee
-
SHA512
5d83e91ac5862c62d5b90418a75feaedcffb01aa2a396d1cb71c11d9dfbfb0e415d38687ce0736b7159f874835ace02f27d11067b2ab6b81f58a948f10fabc00
-
SSDEEP
3072:NmryVYLB2K+OZvhatgDcYYkTz1ICn55cD5WJA2Y:CLEKfZvlc4X13559X
Static task
static1
Behavioral task
behavioral1
Sample
toolspub2.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
toolspub2.exe
Resource
win10v2004-20230915-en
Malware Config
Extracted
smokeloader
up3
Extracted
smokeloader
2020
http://host-file-host6.com/
http://host-host-file8.com/
Targets
-
-
Target
toolspub2.exe
-
Size
190KB
-
MD5
a137245d8bc8109c4bc3df6e2b37d327
-
SHA1
ed8973e65b2aacb60683787831de37e7c805fa6c
-
SHA256
f342950ea78a3910911df852de530912090acea09b895e299d4ba0132ee146ee
-
SHA512
5d83e91ac5862c62d5b90418a75feaedcffb01aa2a396d1cb71c11d9dfbfb0e415d38687ce0736b7159f874835ace02f27d11067b2ab6b81f58a948f10fabc00
-
SSDEEP
3072:NmryVYLB2K+OZvhatgDcYYkTz1ICn55cD5WJA2Y:CLEKfZvlc4X13559X
Score10/10-
Deletes itself
-
Suspicious use of SetThreadContext
-