Extracted

Extracted

• • Target

    bdf7b33a45aad9f77bf389f7fb7f333c_JaffaCakes118

  • Size

    252KB

  • MD5

    bdf7b33a45aad9f77bf389f7fb7f333c

  • SHA1

    c3319344efc9a963789a59f5047fb0092891c68d

  • SHA256

    7bfff9caf766d3badf0dc70ab179e7cec117165728816b973d7d4a710bd78206

  • SHA512

    251ee412272fe2e063be0392cee331ff368e8e181ca0df98b87d098e80d9d56c01c45d9cbd8501888a78b5fbf3e97662afc243fdab2cb4076784bbca1f346756

  • SSDEEP

    3072:YV8Lsp0FEnMjx1tMeWmrObU9EFifXW4s4S4IJE6ow7UbyNdifrrza4dRd:TLmS8Mjx1LWmabWhlSEN+diffza4dR

  Score

  10^/10

  smokeloaderyhubackdoordiscoverytrojan

  • SmokeLoader

    Modular backdoor trojan in use since 2014.

    trojanbackdoorsmokeloader

  • Maps connected drives based on registry

    Disk information is often read in order to detect sandboxing environments.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2