Extracted

• • Target

    2d1203b3d2f115bd70b5d384d4fc6fe39b36833f73e4a672aa1cbf95c93e192d

  • Size

    344KB

  • MD5

    6dbed5f5f0210f2161430ade36104c67

  • SHA1

    943ad1d91e4218c911f02967df690ae85bc0045c

  • SHA256

    2d1203b3d2f115bd70b5d384d4fc6fe39b36833f73e4a672aa1cbf95c93e192d

  • SHA512

    2390a18081c8c75adabcdbb6f111bde83b7465988b61137d7c9481fe5a7d32af7b40ffbbc9c38feab2eefb7e27347c53a228f5e9a7a837c49fcc05e126b6f358

  • SSDEEP

    6144:FTHFdUv1+Q4sFqXT7urXLcZRRf3J6mZkQk:p3Uv1+WqXnurXLcZRRfkYH

  Score

  10^/10

  smokeloader0204backdoordiscoverytrojan

  • SmokeLoader

    Modular backdoor trojan in use since 2014.

    trojanbackdoorsmokeloader

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2