Extracted

• • Target

    397b7c861f15fae570afabc79246f970458526d728b9e564e329e662bfcf8153

  • Size

    337KB

  • MD5

    09a3791119e544010c72ef80930faaa7

  • SHA1

    c0175cde31c5f9183deeead0f7976834cc642783

  • SHA256

    397b7c861f15fae570afabc79246f970458526d728b9e564e329e662bfcf8153

  • SHA512

    40bf4a3b088f36866cbe288cd0a5abfadd8d3a042ff29f0ca6bd8e0e6f6f13e32aeeb55f197f2088e89d89eaa1875f4b43f81cc208314c78a7243f520e6ecb1a

  • SSDEEP

    6144:+1eDLOVvtIFILo0o2VE7wozsLiTDdL4eM1ktT93Mhj:+1MOVv0Im2V6wzSdL4eWktTg

  Score

  10^/10

  smokeloader0604backdoordiscoverytrojan

  • SmokeLoader

    Modular backdoor trojan in use since 2014.

    trojanbackdoorsmokeloader

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2