Overview

overview

10

Static

static

dridex

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    84294be62020f2f5640de5f2b827110ed926415f7429b2ced21522b796d25741

  • Size

    305KB

  • Sample

    220916-1zse9sgff7

  • MD5

    fe8efd9b49dd5d69d5ba140f98bf7074

  • SHA1

    34e4922a2d4902d25b3167d73c5e44baa4bd146b

  • SHA256

    84294be62020f2f5640de5f2b827110ed926415f7429b2ced21522b796d25741

  • SHA512

    464c8a6dd2243b6d20a648dd4ee8857039b3671e48b697309d1ca748b85e9948e4ca3fd04cd4cf89a3462de6d1ce444bc4a6b71db50763630dd1f9cf3c49389a

  • SSDEEP

    3072:FyhXLgGpYj2GLpdSnmJRkrD7hekWC2NwGemVROS2SNKDd30K7bWNSxM/h3Bsxkgi:wFLyLTS7tH2NwQKDh0wxnigabwVf

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Targets

    • Target

      84294be62020f2f5640de5f2b827110ed926415f7429b2ced21522b796d25741

    • Size

      305KB

    • MD5

      fe8efd9b49dd5d69d5ba140f98bf7074

    • SHA1

      34e4922a2d4902d25b3167d73c5e44baa4bd146b

    • SHA256

      84294be62020f2f5640de5f2b827110ed926415f7429b2ced21522b796d25741

    • SHA512

      464c8a6dd2243b6d20a648dd4ee8857039b3671e48b697309d1ca748b85e9948e4ca3fd04cd4cf89a3462de6d1ce444bc4a6b71db50763630dd1f9cf3c49389a

    • SSDEEP

      3072:FyhXLgGpYj2GLpdSnmJRkrD7hekWC2NwGemVROS2SNKDd30K7bWNSxM/h3Bsxkgi:wFLyLTS7tH2NwQKDh0wxnigabwVf

    Score
    10/10
    smokeloaderbackdoortrojan

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Deletes itself

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks