Overview

overview

10

Static

static

dridex

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    c11b91f2baacdd52ba1392a315f0b1ea17ff3b743a58cc499ba8b624a7b4cc78

  • Size

    207KB

  • Sample

    220909-pf9dwsbhfj

  • MD5

    f0ce9e3728c3712350aac0d49da4ef42

  • SHA1

    cab838d865fc2203913d3fa618f8b445fdfa5644

  • SHA256

    c11b91f2baacdd52ba1392a315f0b1ea17ff3b743a58cc499ba8b624a7b4cc78

  • SHA512

    4f347417129969d1827f4eae36377e4d536e5baf66ef6d973ea4f0368ba1c4ae255dfa2e1a37c7f8950911abe1a1d8e1208ce0bbf84fccba0076c3375983ba43

  • SSDEEP

    3072:SMYlcx+9C6NXr5PKuOm8Jrn4Z1zuDDgaBmqnUBOjW2:SQgZKCrzuvheBGV

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Targets

    • Target

      c11b91f2baacdd52ba1392a315f0b1ea17ff3b743a58cc499ba8b624a7b4cc78

    • Size

      207KB

    • MD5

      f0ce9e3728c3712350aac0d49da4ef42

    • SHA1

      cab838d865fc2203913d3fa618f8b445fdfa5644

    • SHA256

      c11b91f2baacdd52ba1392a315f0b1ea17ff3b743a58cc499ba8b624a7b4cc78

    • SHA512

      4f347417129969d1827f4eae36377e4d536e5baf66ef6d973ea4f0368ba1c4ae255dfa2e1a37c7f8950911abe1a1d8e1208ce0bbf84fccba0076c3375983ba43

    • SSDEEP

      3072:SMYlcx+9C6NXr5PKuOm8Jrn4Z1zuDDgaBmqnUBOjW2:SQgZKCrzuvheBGV

    Score
    10/10
    smokeloaderbackdoortrojan

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Deletes itself

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks