Extracted

Extracted

• • Target

    NEAS.878f2e91c03e56ba9719c1c7848ec02bcb27b0da5cb0259f8b05ecd20d7142ae_JC.exe

  • Size

    286KB

  • MD5

    b9ea009ab46c07ed971498d131b67233

  • SHA1

    89a93ee4351aa170b00af86fc0ae718f0135bad9

  • SHA256

    878f2e91c03e56ba9719c1c7848ec02bcb27b0da5cb0259f8b05ecd20d7142ae

  • SHA512

    78f80535f4666b96f6f9cfb9879a618f5fd7ef61a8724d169fd924367c00b0287541d039f8437e6107db88d01ed4f613087e352e4e5e854179fdc83681badd8d

  • SSDEEP

    3072:2aSr5W1ev1Weqgob3IQgl1X6M1xOyy6vQbCQq97kIi4Z:FSrAYWtVb3Q1XPvy6vQbvqdri

  Score

  10^/10

  smokeloaderup3backdoortrojan

  • SmokeLoader

    Modular backdoor trojan in use since 2014.

    trojanbackdoorsmokeloader

  • Deletes itself

  • Executes dropped EXE

  • Suspicious use of SetThreadContext

  behavioral1behavioral2