Extracted

• • Target
    104f89105ef08c142b992dcc9915d4e0284529bfb6f07f522bd0d805800e690b
  • Size 333KB
  • SHA256 104f89105ef08c142b992dcc9915d4e0284529bfb6f07f522bd0d805800e690b
  • MD5 8a22d0c2ca9db6d58495bb87df521949
  • SHA1 294e946b60efc3ed1283e6aa576906e833abc0c3
  • SHA512 cccc593cbb92f3cd1055825d50012368f406bfeb19d9a4ce566999ef09518d728adfb0aed12047e3b376a47058d9afdea126a09fcc70ab022ed50c7e3f6518c6
  • MD5 SHA1 SHA512

  Score

  10^/10

  smokeloaderbackdoorpersistencetrojan

  • SmokeLoader

    Modular backdoor trojan in use since 2014.

    trojanbackdoorsmokeloader

  • Sets service image path in registry

    persistence

  • Suspicious use of SetThreadContext

  behavioral1