Extracted

• • Target

    683b8d56cc93a5b9dd63e70c8186dde0N.exe

  • Size

    358KB

  • MD5

    683b8d56cc93a5b9dd63e70c8186dde0

  • SHA1

    dc28c13ba04ecde27fc2c1ff50f56de54cdb9110

  • SHA256

    29346aca116d82653b5055fe4a91b3ec889284716dfe2760dcbc793589fede80

  • SHA512

    2f4d45a2b492b2cc06bedcb8ca16b925221922a078b4139d0e1740d4c5373b7ffb1684184236e365cb0d22274cbdd7122dee8f46e7df84db3ac58d484a493b0a

  • SSDEEP

    6144:5t0Wytsa993UQPBFaR5kCXSqCZckcf4KAxJxhIS565mLDPJFBTLzaV:5lsZEQbaR5kCXSqCRcgCS56wPR

  Score

  10^/10

  smokeloader1004backdoordiscoverytrojan

  • SmokeLoader

    Modular backdoor trojan in use since 2014.

    trojanbackdoorsmokeloader

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2