General
- Target file.exe
- Size 239KB
- Sample230710-1ercgaef8w
- SHA256 303cfe01cf0a8b0815b0e91080e6cb8d3a1b3e8052a969449bd9008decd8fcd4
- MD5 c4d2cf79f511e2e32babcc981ddf09af
- SHA1 855bf36cc105f26c996fcb1d70f633b9c87a9363
- SHA512 7dae1d06a894c5e1b8280bc1334bcc4b1a6e46cb97395413fe0c8e308ff760d1a64157ee74ad43e45900e4822636b5ed2174aaaf85d3450984b2eba790808b63
- SSDEEP 3072:JJlU/xLw8P57Hew60fWbvXlQ8NSmK8dCANBoRh5lU4ydDBy53WTwV//i:SxLwSiw60+bvXCSCzAyU4ydD1TM/
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20230703-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20230703-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
smokeloader
Botnet
-
pub1
Extracted
Family
-
smokeloader
Version
-
2020
C2
-
http://host-file-host6.com/
-
http://host-host-file8.com/
rc4.i32
rc4.i32
Targets
-
- Target file.exe
- Size 239KB
- SHA256 303cfe01cf0a8b0815b0e91080e6cb8d3a1b3e8052a969449bd9008decd8fcd4
- MD5 c4d2cf79f511e2e32babcc981ddf09af
- SHA1 855bf36cc105f26c996fcb1d70f633b9c87a9363
- SHA512 7dae1d06a894c5e1b8280bc1334bcc4b1a6e46cb97395413fe0c8e308ff760d1a64157ee74ad43e45900e4822636b5ed2174aaaf85d3450984b2eba790808b63
- SSDEEP 3072:JJlU/xLw8P57Hew60fWbvXlQ8NSmK8dCANBoRh5lU4ydDBy53WTwV//i:SxLwSiw60+bvXCSCzAyU4ydD1TM/
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Suspicious use of SetThreadContext