General
-
Target
C5665332E8CA3D76FB4B583B3FF97D1F99828F33CAD445B22020147BF9079F59.exe
-
Size
240KB
-
Sample
240724-z6bknaxfkm
-
MD5
a33cb61ca6fee0992ee687c25b00824e
-
SHA1
24247924ca5a5e7caf133c198cf52fcd831bd0e0
-
SHA256
6861cdee1ee282ee8c69e31503d95291409907d8b27538f8082adb00205ad105
-
SHA512
57f4976bc649d3998f65524095d2997bd3dccb48ce35300162d253398428004479007e528857d349c030a962a7c57432bedb474cfb9bb9bd519d1be0ead884cc
-
SSDEEP
1536:ldKpi5tbTqAdAGkDf+HrN0OjisNkafiw4CpYKxgTr45lGZDvGzMIfGCq2iW7z:ldKpiAIjisWdCeKxgY5lGZzGwqGCH
Static task
static1
Behavioral task
behavioral1
Sample
C5665332E8CA3D76FB4B583B3FF97D1F99828F33CAD445B22020147BF9079F59.exe
Resource
win7-20240704-en
Malware Config
Extracted
smokeloader
pub1
Targets
-
-
Target
C5665332E8CA3D76FB4B583B3FF97D1F99828F33CAD445B22020147BF9079F59.exe
-
Size
240KB
-
MD5
a33cb61ca6fee0992ee687c25b00824e
-
SHA1
24247924ca5a5e7caf133c198cf52fcd831bd0e0
-
SHA256
6861cdee1ee282ee8c69e31503d95291409907d8b27538f8082adb00205ad105
-
SHA512
57f4976bc649d3998f65524095d2997bd3dccb48ce35300162d253398428004479007e528857d349c030a962a7c57432bedb474cfb9bb9bd519d1be0ead884cc
-
SSDEEP
1536:ldKpi5tbTqAdAGkDf+HrN0OjisNkafiw4CpYKxgTr45lGZDvGzMIfGCq2iW7z:ldKpiAIjisWdCeKxgY5lGZzGwqGCH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Suspicious use of SetThreadContext
-