General
- Target setup.exe
- Size 259KB
- Sample230401-bwt29afa69
- SHA256 ff00e0c288012862ba485bffd216e52b4d4e0627c207d429f7bc4e4343dc6df8
- MD5 e92395871eaaf64fa9a5c1fa8aa2d022
- SHA1 1ef50733fb7cd13df8b8cc821528ae177149d9ff
- SHA512 61bc198ec2c413b28698090437f78b687455144881c7844bdaa2d0df3f222e419b8ec5c09408a4c87afc9147f4b9858e9faefac58518fdc7054a45b8b544b184
- SSDEEP 3072:vKyq8qW66dR8pElP6kaRL/4ty097ZD3KFcwdxTrdW5cRsPt:C38j16n9A57ZDyh5hRSt
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
setup.exe
Resource
win7-20230220-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
setup.exe
Resource
win10v2004-20230220-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
smokeloader
Botnet
-
lab
Extracted
Family
-
smokeloader
Version
-
2020
C2
-
http://host-file-host6.com/
-
http://host-host-file8.com/
rc4.i32
rc4.i32
Targets
-
- Target setup.exe
- Size 259KB
- SHA256 ff00e0c288012862ba485bffd216e52b4d4e0627c207d429f7bc4e4343dc6df8
- MD5 e92395871eaaf64fa9a5c1fa8aa2d022
- SHA1 1ef50733fb7cd13df8b8cc821528ae177149d9ff
- SHA512 61bc198ec2c413b28698090437f78b687455144881c7844bdaa2d0df3f222e419b8ec5c09408a4c87afc9147f4b9858e9faefac58518fdc7054a45b8b544b184
- SSDEEP 3072:vKyq8qW66dR8pElP6kaRL/4ty097ZD3KFcwdxTrdW5cRsPt:C38j16n9A57ZDyh5hRSt
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Suspicious use of SetThreadContext