Extracted

Extracted

• • Target

    d27bd3cfbfc9826c423006f591c58a075bf69258111f03784cee7df4ef811b2d

  • Size

    235KB

  • MD5

    737e999290ff1daa73592fecad884fbe

  • SHA1

    e62ec16409d9254844e39c9b047ff6d569a69d91

  • SHA256

    d27bd3cfbfc9826c423006f591c58a075bf69258111f03784cee7df4ef811b2d

  • SHA512

    75ae2bd3192f99a44c67e3f31d11b546af04261e6f34856678b3ef1c909c0e2ba84cdc370002b0448d46f318877e366d3bf938b01a080f9f04a1306381479355

  • SSDEEP

    3072:JvGv6Ufcw9V2C3ZRZX3SZ+mjijuT5fsqI+0wYPDpJKJRfi/:8v6qqCp/CZFiSdsqI+JYPDWJ4

  Score

  10^/10

  smokeloadersprgbackdoorspywarestealertrojan

  • SmokeLoader

    Modular backdoor trojan in use since 2014.

    trojanbackdoorsmokeloader

  • Downloads MZ/PE file

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  behavioral1