Extracted

• • Target
    abe4fa8e21a441660b1028b4479e984c
  • Size 211KB
  • SHA256 780aee300d0f8eba4233484b475aa6a0109e40d0bec49d1d7fd4435846ca6608
  • MD5 abe4fa8e21a441660b1028b4479e984c
  • SHA1 8352ea5eac1bd69f235bc775d8b79fb005cc9ef2
  • SHA512 f7b0ca28dad200d0dd25a1aa200ff777330e139cc7de714c04351fea0949e8c3e74eda66be52c280f85c471d2275767697971e9d69793a96d1665b14adb9adb1
  • MD5 SHA1 SHA512

  Score

  10^/10

  smokeloaderbackdoorcollectionpersistencetrojan

  • SmokeLoader

    Modular backdoor trojan in use since 2014.

    trojanbackdoorsmokeloader

  • Deletes itself

  • Accesses Microsoft Outlook profiles

    collection

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2