Extracted

Extracted

• • Target

    NEAS.b743e97b67d7c8a8d8363cd63cd0fee42e5b45c2d5f0633479d0a387dbb5e8b0_JC.exe

  • Size

    287KB

  • MD5

    4cd8e260c417673f17f86edd315ff061

  • SHA1

    af5889b3421b09f80a738aa36f627646f6cc2423

  • SHA256

    b743e97b67d7c8a8d8363cd63cd0fee42e5b45c2d5f0633479d0a387dbb5e8b0

  • SHA512

    de2f1795605a12a5950ae6918fae5d831464e9d4d21b58658c47877c7de20cb234dd1c8646ff4d10cdf47ef9e13ecf12341e4ff9d4e1f17fdca9dde2a9374960

  • SSDEEP

    3072:iGcS5tv/qtTBWbgI/Teq+v0fj6meCx9OeqejQ0oVS+/a9:iw5tn6WcuTeqpNF

  Score

  10^/10

  smokeloaderpub1backdoortrojan

  • SmokeLoader

    Modular backdoor trojan in use since 2014.

    trojanbackdoorsmokeloader

  • Deletes itself

  • Executes dropped EXE

  • Suspicious use of SetThreadContext

  behavioral1behavioral2