General
- Target setup.exe
- Size 178KB
- Sample230321-b6eejsgc85
- SHA256 834a84ce2a96832afab2ff5f99388209120c060f66bd420e06168c71f090b7ef
- MD5 40f76826e5122977c1e3402e70291e2b
- SHA1 37be9ea9010c9c7a11da14e676af3227a40b77b3
- SHA512 f864d95d99c0bd487a61996384fb5f85b8369d139864a107020eb665f05ff04763d6dd543a8195eb6f4a5c6e936fc1d9ed8a0157650a8221e15c1a379a2c9720
- SSDEEP 3072:JirKyb2kXnWqmMRIHAZ2TYJcpbv6Ur1NpfRkX0Z:dyqCm0IHAZ4mWbvh5k
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
setup.exe
Resource
win7-20230220-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
setup.exe
Resource
win10v2004-20230220-en
10 signatures
150 seconds
Malware Config
Extracted
Family
-
smokeloader
Botnet
-
lab
Extracted
Family
-
smokeloader
Version
-
2020
C2
-
http://host-file-host6.com/
-
http://host-host-file8.com/
rc4.i32
rc4.i32
Targets
-
- Target setup.exe
- Size 178KB
- SHA256 834a84ce2a96832afab2ff5f99388209120c060f66bd420e06168c71f090b7ef
- MD5 40f76826e5122977c1e3402e70291e2b
- SHA1 37be9ea9010c9c7a11da14e676af3227a40b77b3
- SHA512 f864d95d99c0bd487a61996384fb5f85b8369d139864a107020eb665f05ff04763d6dd543a8195eb6f4a5c6e936fc1d9ed8a0157650a8221e15c1a379a2c9720
- SSDEEP 3072:JirKyb2kXnWqmMRIHAZ2TYJcpbv6Ur1NpfRkX0Z:dyqCm0IHAZ4mWbvh5k
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Suspicious use of SetThreadContext