Extracted

• • Target

    04a91de4ff30e4e90208d6388029be75dad8389fef9d434864a4144bc52a9239N.exe

  • Size

    149KB

  • MD5

    a5046967044e1fdeffbc0ba383a65a40

  • SHA1

    af80eaad452a8ef3fd325b6df7bdb30cf8e30f96

  • SHA256

    04a91de4ff30e4e90208d6388029be75dad8389fef9d434864a4144bc52a9239

  • SHA512

    1ee0450cbfaa78c4b09d68d3c347583523fc4a42859bbfe80e35fc8444abc3d836e2ac5653fe87c74a153059277c6fc4d7b9226a2f84f234511ddfe2a6f788ef

  • SSDEEP

    3072:C0bHdqd2tH6KFEHe2KsIDudEzLhfF8s7B5XKylGZ3:C0b99t5EIsI5LT8sNlG

  Score

  10^/10

  smokeloaderbcn1backdoortrojandiscovery

  • SmokeLoader

    Modular backdoor trojan in use since 2014.

    trojanbackdoorsmokeloader

  • Smokeloader family

    smokeloader

  • Maps connected drives based on registry

    Disk information is often read in order to detect sandboxing environments.

  behavioral1behavioral2