Extracted

Extracted

• • Target

    fb267d71e2059ba52e1d02690956664d8ecc4c7e28875293946558232a3a83a7

  • Size

    350KB

  • MD5

    d1f80a8cabf4f103b368c5923b5d76e9

  • SHA1

    fab20649800aecb4183476e7ffdb4a948980602d

  • SHA256

    fb267d71e2059ba52e1d02690956664d8ecc4c7e28875293946558232a3a83a7

  • SHA512

    f1e8480606c66ee2a5539063884363dd2358ac0db210589a8e1eaaa43969def9659dd387fd5b7edac12249d538a64a49a1b58b798e1953805e7125b8cd5b50ed

  • SSDEEP

    3072:Bva5CA33zCS1gw2QpXDgScePBcw4adyWdDSXbuKLhZNhBUSmdoZgAHBrRGqT/s3m:E5FCYj2EjceTTBapXhZLHBrRmTi

  Score

  10^/10

  smokeloaderpu10backdoortrojan

  • SmokeLoader

    Modular backdoor trojan in use since 2014.

    trojanbackdoorsmokeloader

  • Deletes itself

  • Executes dropped EXE

  • Suspicious use of SetThreadContext

  behavioral1