Overview

overview

10

Static

static

dridex

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1a40eeed7f80d873b242d4c88e65b5d34b6bcb50b4941db64275249ff5a0ec05

  • Size

    250KB

  • Sample

    220915-elh4sabhe6

  • MD5

    a2d1e9bb73493be2c78a88a5a826ea36

  • SHA1

    6dacd9aa1459beb86db5fc801911ddb1b2923403

  • SHA256

    1a40eeed7f80d873b242d4c88e65b5d34b6bcb50b4941db64275249ff5a0ec05

  • SHA512

    d17618856035ea6a47685ee73d8b73f8da4870d370d661672ff540e15c8cc924e2f2bc1cfe6e8607139ee0eba507e642df18b1e0ee6e730758dff05ab4be55c5

  • SSDEEP

    3072:RXMvNlNQnrLZfHpAc5yfS9EzSzW6WI5oGAiIjeVzq0KQZYAroUhDjM/h3Bsxkgah:1QqLZfpUVgWI5oGyCzq0ntrVjnigah

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Targets

    • Target

      1a40eeed7f80d873b242d4c88e65b5d34b6bcb50b4941db64275249ff5a0ec05

    • Size

      250KB

    • MD5

      a2d1e9bb73493be2c78a88a5a826ea36

    • SHA1

      6dacd9aa1459beb86db5fc801911ddb1b2923403

    • SHA256

      1a40eeed7f80d873b242d4c88e65b5d34b6bcb50b4941db64275249ff5a0ec05

    • SHA512

      d17618856035ea6a47685ee73d8b73f8da4870d370d661672ff540e15c8cc924e2f2bc1cfe6e8607139ee0eba507e642df18b1e0ee6e730758dff05ab4be55c5

    • SSDEEP

      3072:RXMvNlNQnrLZfHpAc5yfS9EzSzW6WI5oGAiIjeVzq0KQZYAroUhDjM/h3Bsxkgah:1QqLZfpUVgWI5oGyCzq0ntrVjnigah

    Score
    10/10
    smokeloaderbackdoortrojan

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Deletes itself

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks