Extracted

• • Target

    23399ccafc909331789727c2ec6fa4ddfba75ab422da5a4cd2bab72b20a23b4c

  • Size

    334KB

  • MD5

    84916944ea00b2e3ff7e8844a759cc51

  • SHA1

    fdcc0a78a8bcff40be515bd2375ee66941f7c8c8

  • SHA256

    23399ccafc909331789727c2ec6fa4ddfba75ab422da5a4cd2bab72b20a23b4c

  • SHA512

    0485757f60e59d70f47c4f4565e3bc91eb43dd5ca644a7cceba38ba8ec37f19f93e461360ddaab43ee55c1eab6a5a7c7de674520d02bb206e804650bc0715c94

  Score

  10^/10

  smokeloaderbackdoorcollectionevasionsuricatatrojan

  • SmokeLoader

    Modular backdoor trojan in use since 2014.

    trojanbackdoorsmokeloader

  • suricata: ET MALWARE Windows dir Microsoft Windows DOS prompt command exit OUTBOUND

    suricata: ET MALWARE Windows dir Microsoft Windows DOS prompt command exit OUTBOUND

    suricata

  • suricata: ET MALWARE Windows route Microsoft Windows DOS prompt command exit OUTBOUND

    suricata: ET MALWARE Windows route Microsoft Windows DOS prompt command exit OUTBOUND

    suricata

  • Modifies Windows Firewall

    evasion

  • Deletes itself

  • Accesses Microsoft Outlook profiles

    collection
  behavioral1