Overview

overview

10

Static

static

dridex

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    59875a842587d6a4e76304ab84b621513b5f3714680ff3a5c71733fc5178865b

  • Size

    291KB

  • Sample

    220908-pra1gaeeh3

  • MD5

    ea291eb1644ba93d9cac2e4f54a4c794

  • SHA1

    17b57071d5870469e0db4fa053c5e29c35cdf259

  • SHA256

    59875a842587d6a4e76304ab84b621513b5f3714680ff3a5c71733fc5178865b

  • SHA512

    1c5fbcdef87c9b68ecb417dd9ec2c8bbf7ef13bc9757109c6ceb7f178386f9b2239ed2797fa1e1a48dde5f6f3d8141b4ec53b672a1a6e6f7cce127c5f54a6d44

  • SSDEEP

    6144:MhvKgCp4t94iDqCOuy6M8aBxuOCg73GhadwIPVLKcF:9gCG94imXB6M8a9Cg73Ghadwwd9

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Targets

    • Target

      59875a842587d6a4e76304ab84b621513b5f3714680ff3a5c71733fc5178865b

    • Size

      291KB

    • MD5

      ea291eb1644ba93d9cac2e4f54a4c794

    • SHA1

      17b57071d5870469e0db4fa053c5e29c35cdf259

    • SHA256

      59875a842587d6a4e76304ab84b621513b5f3714680ff3a5c71733fc5178865b

    • SHA512

      1c5fbcdef87c9b68ecb417dd9ec2c8bbf7ef13bc9757109c6ceb7f178386f9b2239ed2797fa1e1a48dde5f6f3d8141b4ec53b672a1a6e6f7cce127c5f54a6d44

    • SSDEEP

      6144:MhvKgCp4t94iDqCOuy6M8aBxuOCg73GhadwIPVLKcF:9gCG94imXB6M8a9Cg73Ghadwwd9

    Score
    10/10
    smokeloaderbackdoortrojan

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Deletes itself

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks