Extracted

• • Target

    db12df1b8da6d3a11637bfdd99568a8cc16a099ab03f0c154709186fcb55ccab

  • Size

    333KB

  • MD5

    20039ac6d81a0d0a6fc5343db2a7ba10

  • SHA1

    166a4fd4c83056a876aa25a6dd9b3cf87f5760a3

  • SHA256

    db12df1b8da6d3a11637bfdd99568a8cc16a099ab03f0c154709186fcb55ccab

  • SHA512

    db8944a58f8630880ff65ce81404048e3bd40331c30a02478608ee9b6b09172824d2944bb69c298b09306fad8736726070732919ed62543212704af47af0fd24

  Score

  10^/10

  smokeloaderbackdoortrojan

  • SmokeLoader

    Modular backdoor trojan in use since 2014.

    trojanbackdoorsmokeloader

  • Executes dropped EXE

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1