Extracted

• • Target

    69a2ad5c179441953313502221fc9b76bd31ce89baff1c33361f5f18111e5aea

  • Size

    352KB

  • MD5

    187605776b1019b99f4ba576edc3b943

  • SHA1

    3fafddf5cdbaff39a5d6a296b3227eff0ec294f2

  • SHA256

    69a2ad5c179441953313502221fc9b76bd31ce89baff1c33361f5f18111e5aea

  • SHA512

    cb9599ea33ac8e8307eafa9a40f6fa4ed8448dbb416a5a0e46de8af9dbd60ba640267cafeb3441237646661ed736497e86a2e48751195a7ec2900accc720f60a

  Score

  10^/10

  smokeloaderbackdoorcollectionevasionsuricatatrojan

  • SmokeLoader

    Modular backdoor trojan in use since 2014.

    trojanbackdoorsmokeloader

  • suricata: ET MALWARE Windows dir Microsoft Windows DOS prompt command exit OUTBOUND

    suricata: ET MALWARE Windows dir Microsoft Windows DOS prompt command exit OUTBOUND

    suricata

  • suricata: ET MALWARE Windows route Microsoft Windows DOS prompt command exit OUTBOUND

    suricata: ET MALWARE Windows route Microsoft Windows DOS prompt command exit OUTBOUND

    suricata

  • Modifies Windows Firewall

    evasion

  • Deletes itself

  • Accesses Microsoft Outlook profiles

    collection
  behavioral1