Overview

overview

10

Static

static

dridex

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    4f976030dc517bca7c4f93b923ea10abbe73907dca60e2fbf97c1f6f40885f7f

  • Size

    248KB

  • Sample

    220915-p6546adbc3

  • MD5

    182971680dc059c495fa8d5109006e79

  • SHA1

    70ed35394320c1c1a9221254b50ad557e22d9832

  • SHA256

    4f976030dc517bca7c4f93b923ea10abbe73907dca60e2fbf97c1f6f40885f7f

  • SHA512

    0e29e865be7b14fdabe40f2014725cf34571186a548509ba87dcbaec1de276e2552031a16799db0c5f865b256d810591ac836d1fd77f9bb12ea3bdf488fbb876

  • SSDEEP

    3072:qXMyCiGABLnt1KDdfvpdMN5Mh7HfYGve/6ej+ox+zms9PWVEch0KqkFV2xNM/h36:KhFLnt1kTXACejd8pm0IKNniga

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Targets

    • Target

      4f976030dc517bca7c4f93b923ea10abbe73907dca60e2fbf97c1f6f40885f7f

    • Size

      248KB

    • MD5

      182971680dc059c495fa8d5109006e79

    • SHA1

      70ed35394320c1c1a9221254b50ad557e22d9832

    • SHA256

      4f976030dc517bca7c4f93b923ea10abbe73907dca60e2fbf97c1f6f40885f7f

    • SHA512

      0e29e865be7b14fdabe40f2014725cf34571186a548509ba87dcbaec1de276e2552031a16799db0c5f865b256d810591ac836d1fd77f9bb12ea3bdf488fbb876

    • SSDEEP

      3072:qXMyCiGABLnt1KDdfvpdMN5Mh7HfYGve/6ej+ox+zms9PWVEch0KqkFV2xNM/h36:KhFLnt1kTXACejd8pm0IKNniga

    Score
    10/10
    smokeloaderbackdoortrojan

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks