Overview

overview

10

Static

static

dridex

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c58f3db2918d9bafd2641ae2b14b315d5111191afebcf71c2c0ea37bbc186ab1

  • Size

    291KB

  • Sample

    220908-p1e1saefb6

  • MD5

    9168b4b52d74b6bdb088f76edc1b495a

  • SHA1

    ecc330ea86204bb9e85e95594e252b9512d0db8a

  • SHA256

    c58f3db2918d9bafd2641ae2b14b315d5111191afebcf71c2c0ea37bbc186ab1

  • SHA512

    7711ca8414c339cbc9a9529e9713d149ff36abfa5dba18e12e25771f2a9408a8363de68d0bee3225264e0f9da5c90d319c233a69440722bbac5655e2b8216e3f

  • SSDEEP

    6144:MhvLxcjL1nmtDsHOzSNB5ykYJ11XlHhh73SrUp5:kxe1nmtwuuNB5yh1XlHhx3h

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Targets

    • Target

      c58f3db2918d9bafd2641ae2b14b315d5111191afebcf71c2c0ea37bbc186ab1

    • Size

      291KB

    • MD5

      9168b4b52d74b6bdb088f76edc1b495a

    • SHA1

      ecc330ea86204bb9e85e95594e252b9512d0db8a

    • SHA256

      c58f3db2918d9bafd2641ae2b14b315d5111191afebcf71c2c0ea37bbc186ab1

    • SHA512

      7711ca8414c339cbc9a9529e9713d149ff36abfa5dba18e12e25771f2a9408a8363de68d0bee3225264e0f9da5c90d319c233a69440722bbac5655e2b8216e3f

    • SSDEEP

      6144:MhvLxcjL1nmtDsHOzSNB5ykYJ11XlHhh73SrUp5:kxe1nmtwuuNB5yh1XlHhx3h

    Score
    10/10
    smokeloaderbackdoortrojan

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Executes dropped EXE

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks