Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6a852eb059d77d6eea58d73ea47eb0da3c93a78935576ca616c16abfdb717cb7

  • Size

    317KB

  • Sample

    211203-d6mr2aebbr

  • MD5

    2e5b15e012f28b4405fd9ecdbfd0cb98

  • SHA1

    bd733a45bdc3d32310a42e9ae2070b2f2bb9ccc2

  • SHA256

    6a852eb059d77d6eea58d73ea47eb0da3c93a78935576ca616c16abfdb717cb7

  • SHA512

    7efbd90efd1c9ffc5c50e8a1079eecb7e546388f0cdeed25bc4be54bfcf2556d1aff8a078a4a58c0f1afb74dfa34e795435b2c4e8ac2e080bcdf2e1f0bd77bc1

Score
10/10
smokeloaderbackdoorcollectionevasiontrojan

Malware Config

Extracted

Family

smokeloader

Version

2020

C2

https://cinems.club/search.php

https://clothes.surf/search.php
rc4.i32
rc4.i32

Targets

    • Target

      6a852eb059d77d6eea58d73ea47eb0da3c93a78935576ca616c16abfdb717cb7

    • Size

      317KB

    • MD5

      2e5b15e012f28b4405fd9ecdbfd0cb98

    • SHA1

      bd733a45bdc3d32310a42e9ae2070b2f2bb9ccc2

    • SHA256

      6a852eb059d77d6eea58d73ea47eb0da3c93a78935576ca616c16abfdb717cb7

    • SHA512

      7efbd90efd1c9ffc5c50e8a1079eecb7e546388f0cdeed25bc4be54bfcf2556d1aff8a078a4a58c0f1afb74dfa34e795435b2c4e8ac2e080bcdf2e1f0bd77bc1

    Score
    10/10
    smokeloaderbackdoorcollectionevasiontrojan
    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Command-Line Interface

1
T1059

Persistence

Modify Existing Service

1
T1031

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

3
T1082

Process Discovery

1
T1057

Lateral Movement

Collection

Email Collection

1
T1114

Exfiltration

Command and Control

Impact

Tasks