Overview

overview

10

Static

static

dridex

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    8e56458c287ca06c536cf6187cde18269acde1aeb9d3d89ecd1805e091c0e996

  • Size

    274KB

  • Sample

    220906-r282cseec8

  • MD5

    326eb015ae952b57b1197ad4c9cbfdfc

  • SHA1

    0cd45b84ed3e51a6362a022f814fd317801f6c49

  • SHA256

    8e56458c287ca06c536cf6187cde18269acde1aeb9d3d89ecd1805e091c0e996

  • SHA512

    f995492e098058f0a4770ad719e7f852263a508c9e2c8d4368cee8ff1c766ae5b03c4d053bf5a11316107d67247196236042c36dc99af83b639b89a8f63284e8

  • SSDEEP

    6144:fN4L4LxeD0oWywVv20cbmGG9jLWSDkFECTmUz9yjvsE:14L+e4tnVv20cbmGG9j9DkFEMfz9yrsE

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Targets

    • Target

      8e56458c287ca06c536cf6187cde18269acde1aeb9d3d89ecd1805e091c0e996

    • Size

      274KB

    • MD5

      326eb015ae952b57b1197ad4c9cbfdfc

    • SHA1

      0cd45b84ed3e51a6362a022f814fd317801f6c49

    • SHA256

      8e56458c287ca06c536cf6187cde18269acde1aeb9d3d89ecd1805e091c0e996

    • SHA512

      f995492e098058f0a4770ad719e7f852263a508c9e2c8d4368cee8ff1c766ae5b03c4d053bf5a11316107d67247196236042c36dc99af83b639b89a8f63284e8

    • SSDEEP

      6144:fN4L4LxeD0oWywVv20cbmGG9jLWSDkFECTmUz9yjvsE:14L+e4tnVv20cbmGG9j9DkFEMfz9yrsE

    Score
    10/10
    smokeloaderbackdoortrojan

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Deletes itself

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks