Extracted

Extracted

• • Target

    ec894b988d3e8cf720f40db52e735754_JaffaCakes118

  • Size

    696KB

  • MD5

    ec894b988d3e8cf720f40db52e735754

  • SHA1

    3bc08cc097a6e4e072e680c10eaeef14edc73fb4

  • SHA256

    d5da21d949f518943f96cd13cfe508e743e0597ba18d2caf22ce1df2feb93078

  • SHA512

    6053294655b8f1a110f751214e70975ec9ec8cb2357bcf8a6a95030f897f8a83411b1b1014d402832ebeda4e86a9aeeb0dabf52f2296183be4feca581b9f315d

  • SSDEEP

    12288:u3VAETQVzYNkt//xMoc6gzUhtn2K3j+FAJZimlRE2cG:u3qDYNkJl3nFztTlRn7

  Score

  10^/10

  smokeloadervgubackdoordiscoverytrojan

  • SmokeLoader

    Modular backdoor trojan in use since 2014.

    trojanbackdoorsmokeloader

  • Maps connected drives based on registry

    Disk information is often read in order to detect sandboxing environments.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2