Extracted

• • Target

    fe61b7e86b36434229c393ff08855254174d29a69980f2760848dae487288c82.bin.sample

  • Size

    222KB

  • MD5

    5beab67e02d1d3480a411af022d3c9c7

  • SHA1

    5a5cb906ddfea4fff20ace80785a07f4d1b1e179

  • SHA256

    fe61b7e86b36434229c393ff08855254174d29a69980f2760848dae487288c82

  • SHA512

    59e6f7b5529ab0cfcfcbb8f8b8362ffa6f4b1ae154d64265e0f1236df10680170808fa3c3af01b8bb743c07a481ab77cc77d0615a827573e932f9c2432007ea4

  • SSDEEP

    6144:AreQ7SkLyF9I2Z/lNW3xE7+MsqLHuFrcCuu:AK/MzBGs2Ufuu

  Score

  10^/10

  smokeloader2210backdoordiscoverytrojanupx

  • SmokeLoader

    Modular backdoor trojan in use since 2014.

    trojanbackdoorsmokeloader

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Suspicious use of SetThreadContext

  behavioral1behavioral2