General
- Target 26f8d9b2d6bbd02c7681b8f60f89389b.exe
- Size 280KB
- Sample230310-pcltesde65
- SHA256 985e23f9af053ee395993f3c5f575c211a161f461fb5a16737800200deea39ed
- MD5 26f8d9b2d6bbd02c7681b8f60f89389b
- SHA1 b357c5fa2453de78ec202d6904cb115f2216338f
- SHA512 a853f9091f68d8294eaae7d985b6e72b8c9fa78a9c6265e09e9c7ee7aaafeafd9a53a257ff8cb5cacc344c46a441beb319acc4074e71ac735a0a50b4396d3b43
- SSDEEP 3072:k1AVKDFYsL91Te4LEo6GClie38AFG2ol7D6MWIjpmdWN/eOcXylIXT9aL7wsptmz:alLjDfClKAFG2EWypfN/eVXye8b+
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
26f8d9b2d6bbd02c7681b8f60f89389b.exe
Resource
win7-20230220-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
26f8d9b2d6bbd02c7681b8f60f89389b.exe
Resource
win10v2004-20230220-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
smokeloader
Botnet
-
lab
Extracted
Family
-
smokeloader
Version
-
2020
C2
-
http://host-file-host6.com/
-
http://host-host-file8.com/
rc4.i32
rc4.i32
Targets
-
- Target 26f8d9b2d6bbd02c7681b8f60f89389b.exe
- Size 280KB
- SHA256 985e23f9af053ee395993f3c5f575c211a161f461fb5a16737800200deea39ed
- MD5 26f8d9b2d6bbd02c7681b8f60f89389b
- SHA1 b357c5fa2453de78ec202d6904cb115f2216338f
- SHA512 a853f9091f68d8294eaae7d985b6e72b8c9fa78a9c6265e09e9c7ee7aaafeafd9a53a257ff8cb5cacc344c46a441beb319acc4074e71ac735a0a50b4396d3b43
- SSDEEP 3072:k1AVKDFYsL91Te4LEo6GClie38AFG2ol7D6MWIjpmdWN/eOcXylIXT9aL7wsptmz:alLjDfClKAFG2EWypfN/eVXye8b+
- MD5 SHA1 SHA512 SSDEEP
Score10/10Suspicious use of SetThreadContext