Overview

overview

10

Static

static

dridex

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    b4c964cdb65ba7237a51b6a561250d396539766d42d5801c541937da7a081e97

  • Size

    307KB

  • Sample

    220910-p98z8adham

  • MD5

    a0c32a624782c1b7216d8efd8b9ab936

  • SHA1

    79ebb55b57d1b570fc1a055a955770377d8b621d

  • SHA256

    b4c964cdb65ba7237a51b6a561250d396539766d42d5801c541937da7a081e97

  • SHA512

    54035d65fc1301328bce95ca68f3ddcabb815eb120501c2e2e075ebb6a9c0ff37515a80a1c35ceb3bcc429dc939a223be065f7f27851a46291f6ce1194e21bce

  • SSDEEP

    6144:c+Z/VbvCfg+GrjzutMamChcbKQGDaFuZK9z6s6EKeab2SGGGGD:cWVbvC4rneMBIcbKQ9FyK9W7Bea

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Targets

    • Target

      b4c964cdb65ba7237a51b6a561250d396539766d42d5801c541937da7a081e97

    • Size

      307KB

    • MD5

      a0c32a624782c1b7216d8efd8b9ab936

    • SHA1

      79ebb55b57d1b570fc1a055a955770377d8b621d

    • SHA256

      b4c964cdb65ba7237a51b6a561250d396539766d42d5801c541937da7a081e97

    • SHA512

      54035d65fc1301328bce95ca68f3ddcabb815eb120501c2e2e075ebb6a9c0ff37515a80a1c35ceb3bcc429dc939a223be065f7f27851a46291f6ce1194e21bce

    • SSDEEP

      6144:c+Z/VbvCfg+GrjzutMamChcbKQGDaFuZK9z6s6EKeab2SGGGGD:cWVbvC4rneMBIcbKQ9FyK9W7Bea

    Score
    10/10
    smokeloaderbackdoortrojan

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Deletes itself

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks