Extracted

• • Target

    6831e7524e305fea862ef2e472a47310bcee1b6383f837d1a36eb56ae0049611

  • Size

    292KB

  • MD5

    e1ee04bbc9f607d61b0a614a4550c16d

  • SHA1

    16fa1fc2669d4b629375213269a40dd254c3978f

  • SHA256

    6831e7524e305fea862ef2e472a47310bcee1b6383f837d1a36eb56ae0049611

  • SHA512

    4e0759f495aeee4916c1b228591287736b99293cfff52ee0ccedf88d9f15eb009327a0b5c5283da8344fddda68c3bad7d6ddc1c13091f2f017b7b10b9cf906db

  • SSDEEP

    3072:9D9n6UpGbOLqMZUnru5r7VupJe0GZ8DnzvKmvGjwvXopVj7IC7C:+UpvLf6nrYpuu0GyjWmgGwV/IMC

  Score

  10^/10

  smokeloadersystembcbackdoortrojan

  • Detects Smokeloader packer

  • SmokeLoader

    Modular backdoor trojan in use since 2014.

    trojanbackdoorsmokeloader

  • SystemBC

    SystemBC is a proxy and remote administration tool first seen in 2019.

    trojansystembc

  • Downloads MZ/PE file

  • Executes dropped EXE

  behavioral1