Extracted

Extracted

Extracted

• • Target

    NEAS.8c5a38887768a98da1ba757c359a2f24b137ef9b78c7b5ba8383d999582d1b2b.exe

  • Size

    12.6MB

  • MD5

    5b11984d808a08373fafde3b252dbdf0

  • SHA1

    0b925d0a2f2c06bf3cb56ea4b0faf905d88659b2

  • SHA256

    8c5a38887768a98da1ba757c359a2f24b137ef9b78c7b5ba8383d999582d1b2b

  • SHA512

    de979858e93383a75a9a1e267ff0c8077719197f265a0a17652f6c5f9bdd45849b6ae70f204f257ddd3df4cdce069eda6ff7a87925d507c704644d55e5218d38

  • SSDEEP

    196608:u5Pub+LsCo02yq3V/TEzmabNLddsEFjd9F9Hk5Ydje1I9f4qWdKzRgll4:YmbNC8rGbw5AQI9f4jKzRgl

  Score

  10^/10

  smokeloaderstealcup3backdoorevasionstealertrojanupx

  • SmokeLoader

    Modular backdoor trojan in use since 2014.

    trojanbackdoorsmokeloader

  • Stealc

    Stealc is an infostealer written in C++.

    stealerstealc

  • Downloads MZ/PE file

  • Modifies Windows Firewall

    evasion

  • Stops running service(s)

    evasion

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Modifies boot configuration data using bcdedit

  behavioral1behavioral2