General
- Target b75d84de4614d5fcb84a8bb31d669b55.exe
- Size 260KB
- Sample230405-bt375sbb48
- SHA256 2d1bbf9701cd4b8c06272453fdae23c03a12f6245a6ff1ed04fce8d82ff15d82
- MD5 b75d84de4614d5fcb84a8bb31d669b55
- SHA1 36b8254db0f20195a8fea70b765b5e4f5ce1fa95
- SHA512 2bc27b347719560b22db64d83fcd27a1edbf67f4230b3a71d1446cd72a059bbf85c5b2e06fcfd0e4d78c813e6c69f985643496616263765a68ff1c3d6aa03542
- SSDEEP 3072:lXgcJ9x5tGhbvawWFYyOamX/3IQ0egJwPzCqebmjmdICdTNx9VueJlqaJSNn:xTdGcSxamvYNJBqhjmd1dxTVueJsaW
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
b75d84de4614d5fcb84a8bb31d669b55.exe
Resource
win7-20230220-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
b75d84de4614d5fcb84a8bb31d669b55.exe
Resource
win10v2004-20230220-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
smokeloader
Botnet
-
pub2
Extracted
Family
-
smokeloader
Version
-
2020
C2
-
http://host-file-host6.com/
-
http://host-host-file8.com/
rc4.i32
rc4.i32
Targets
-
- Target b75d84de4614d5fcb84a8bb31d669b55.exe
- Size 260KB
- SHA256 2d1bbf9701cd4b8c06272453fdae23c03a12f6245a6ff1ed04fce8d82ff15d82
- MD5 b75d84de4614d5fcb84a8bb31d669b55
- SHA1 36b8254db0f20195a8fea70b765b5e4f5ce1fa95
- SHA512 2bc27b347719560b22db64d83fcd27a1edbf67f4230b3a71d1446cd72a059bbf85c5b2e06fcfd0e4d78c813e6c69f985643496616263765a68ff1c3d6aa03542
- SSDEEP 3072:lXgcJ9x5tGhbvawWFYyOamX/3IQ0egJwPzCqebmjmdICdTNx9VueJlqaJSNn:xTdGcSxamvYNJBqhjmd1dxTVueJsaW
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Suspicious use of SetThreadContext