Overview

overview

10

Static

static

dridex

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    96e99d6aa19f24883d722ff24a313295883459ee7ea2ba68adb478f0cc63e948

  • Size

    250KB

  • Sample

    220913-pflb3abchq

  • MD5

    1778c38a3ae1e715c9878cceefddec3a

  • SHA1

    12bc6cfb0daa84de6623da61d95a6ab369e29b8a

  • SHA256

    96e99d6aa19f24883d722ff24a313295883459ee7ea2ba68adb478f0cc63e948

  • SHA512

    eced7a4ad4b8753e63202f9f897ea996e9f5c4f94dcea31ed313c3fe7c5b777638be8b87fa4de7dc193329f73df28ff660e02d494532975e784424991efa1bac

  • SSDEEP

    6144:CMS/nuNc+u7QTe8Ng4gm8f6OIZYj7ZyLX:lSuK+u7QTe8Ng48f6xZY

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Targets

    • Target

      96e99d6aa19f24883d722ff24a313295883459ee7ea2ba68adb478f0cc63e948

    • Size

      250KB

    • MD5

      1778c38a3ae1e715c9878cceefddec3a

    • SHA1

      12bc6cfb0daa84de6623da61d95a6ab369e29b8a

    • SHA256

      96e99d6aa19f24883d722ff24a313295883459ee7ea2ba68adb478f0cc63e948

    • SHA512

      eced7a4ad4b8753e63202f9f897ea996e9f5c4f94dcea31ed313c3fe7c5b777638be8b87fa4de7dc193329f73df28ff660e02d494532975e784424991efa1bac

    • SSDEEP

      6144:CMS/nuNc+u7QTe8Ng4gm8f6OIZYj7ZyLX:lSuK+u7QTe8Ng48f6xZY

    Score
    10/10
    smokeloaderbackdoortrojan

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Deletes itself

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks