General
- Target file.exe
- Size 234KB
- Sample230602-bex3kshb95
- SHA256 ec966fb9a431938c200f620cc5366bbbeed1919d4650ccb1b29b79b3862f3b43
- MD5 ae00d115ff7257a976abe13c6fb2010a
- SHA1 7ec339a4457bf7b42ae4844bb2fa237f730b1d0a
- SHA512 995a12503fa0a4ecb3a780c9cc80f80763e74e1e288c206f45316251cef02dc6fdd61393c73c8b000392199171cf6c6e7d32dc9b126b30e7a7e0f5664315133d
- SSDEEP 3072:lXjU/t0GwZzeWVsAxzqslspnvaFgwW9lFgXPWpye5TST:husV/xzqsknv8W9LtygS
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20230220-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20230220-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
smokeloader
Botnet
-
pub1
Extracted
Family
-
smokeloader
Version
-
2020
C2
-
http://host-file-host6.com/
-
http://host-host-file8.com/
rc4.i32
rc4.i32
Targets
-
- Target file.exe
- Size 234KB
- SHA256 ec966fb9a431938c200f620cc5366bbbeed1919d4650ccb1b29b79b3862f3b43
- MD5 ae00d115ff7257a976abe13c6fb2010a
- SHA1 7ec339a4457bf7b42ae4844bb2fa237f730b1d0a
- SHA512 995a12503fa0a4ecb3a780c9cc80f80763e74e1e288c206f45316251cef02dc6fdd61393c73c8b000392199171cf6c6e7d32dc9b126b30e7a7e0f5664315133d
- SSDEEP 3072:lXjU/t0GwZzeWVsAxzqslspnvaFgwW9lFgXPWpye5TST:husV/xzqsknv8W9LtygS
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Suspicious use of SetThreadContext