General
- Target 4320fffd20bf66e6eb74f2a1111cbe28.exe
- Size 224KB
- Sample230330-rrt5fsda64
- SHA256 a972d9e46c6bb59384ae8c522fdf36281dae6556155379af01807f6cf7563e8f
- MD5 4320fffd20bf66e6eb74f2a1111cbe28
- SHA1 75401c78bfe66efe02aa2fb11045353cc06fc906
- SHA512 964b37832f5b3400bd5e17cc1a8787400115e40185464be3ec1cc3ecb3c10631ad6351332a2d251aa584b31ad26b556d49594adcab26b0bf783914420b406edb
- SSDEEP 3072:CTZATtRSZIXwafb1Xf9pMO9/C+yXk83KRA82nq4Py/6EURM6LqQ80:02Trn++ik8Tnq4PY6PL
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
4320fffd20bf66e6eb74f2a1111cbe28.exe
Resource
win7-20230220-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
4320fffd20bf66e6eb74f2a1111cbe28.exe
Resource
win10v2004-20230220-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
smokeloader
Botnet
-
lab
Extracted
Family
-
smokeloader
Version
-
2020
C2
-
http://host-file-host6.com/
-
http://host-host-file8.com/
rc4.i32
rc4.i32
Targets
-
- Target 4320fffd20bf66e6eb74f2a1111cbe28.exe
- Size 224KB
- SHA256 a972d9e46c6bb59384ae8c522fdf36281dae6556155379af01807f6cf7563e8f
- MD5 4320fffd20bf66e6eb74f2a1111cbe28
- SHA1 75401c78bfe66efe02aa2fb11045353cc06fc906
- SHA512 964b37832f5b3400bd5e17cc1a8787400115e40185464be3ec1cc3ecb3c10631ad6351332a2d251aa584b31ad26b556d49594adcab26b0bf783914420b406edb
- SSDEEP 3072:CTZATtRSZIXwafb1Xf9pMO9/C+yXk83KRA82nq4Py/6EURM6LqQ80:02Trn++ik8Tnq4PY6PL
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Suspicious use of SetThreadContext