Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

dridex

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c072fe24046a3228661e3ae9b96fce4e39dab53f058b62e944cac3c58c1b5829

  • Size

    267KB

  • Sample

    220913-eqz8vsadej

  • MD5

    51b8c675a784d9fd6257f1db51a28624

  • SHA1

    ec8c5b8e3181065ed7a3ca1c5a836a8dce1b6631

  • SHA256

    c072fe24046a3228661e3ae9b96fce4e39dab53f058b62e944cac3c58c1b5829

  • SHA512

    fb273c61a1fa56738ce10f8d642efc7da6dd90022afe0203019e1c7e4df67bd2af5f803f7cb9ca8d19f6a6316c250cb05ed05ed3bd01046b86084bb3ffbf385c

  • SSDEEP

    6144:4sxqFaeR195lHlxc8JTooPs/p+MtZq9L:Xq5195pHc8JTooPskMt

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Targets

    • Target

      c072fe24046a3228661e3ae9b96fce4e39dab53f058b62e944cac3c58c1b5829

    • Size

      267KB

    • MD5

      51b8c675a784d9fd6257f1db51a28624

    • SHA1

      ec8c5b8e3181065ed7a3ca1c5a836a8dce1b6631

    • SHA256

      c072fe24046a3228661e3ae9b96fce4e39dab53f058b62e944cac3c58c1b5829

    • SHA512

      fb273c61a1fa56738ce10f8d642efc7da6dd90022afe0203019e1c7e4df67bd2af5f803f7cb9ca8d19f6a6316c250cb05ed05ed3bd01046b86084bb3ffbf385c

    • SSDEEP

      6144:4sxqFaeR195lHlxc8JTooPs/p+MtZq9L:Xq5195pHc8JTooPskMt

    Score
    10/10
    smokeloaderbackdoortrojan

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Executes dropped EXE

    • Deletes itself

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks