Overview

overview

10

Static

static

dridex

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    fdcf79768788593d43940b938aa940cd3ccf668b043d83d4bdd006591ba995e1

  • Size

    256KB

  • Sample

    220916-fcva5aeff6

  • MD5

    1af36dcde51ad616d343af773c3bf4ab

  • SHA1

    9aed1acce760933323347d9c1e4af95bb1f77cc7

  • SHA256

    fdcf79768788593d43940b938aa940cd3ccf668b043d83d4bdd006591ba995e1

  • SHA512

    c59fc3ae264e239634711cb0f93ca7f182685573a10cf45244df2592d0f49fc2c0b13ac97e4cac58a08b34d1b9f34800900a8c451089abe629f7fd5bf56dacd6

  • SSDEEP

    3072:UXM1q69ZTBQTlS5AsMk/jJXagjlD0OdEzWfL1vKU6d0K55ghrnCM/h3BsxkgaBCF:QoUT9sTbJl0cEq5vKLd0UurnCniga

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Targets

    • Target

      fdcf79768788593d43940b938aa940cd3ccf668b043d83d4bdd006591ba995e1

    • Size

      256KB

    • MD5

      1af36dcde51ad616d343af773c3bf4ab

    • SHA1

      9aed1acce760933323347d9c1e4af95bb1f77cc7

    • SHA256

      fdcf79768788593d43940b938aa940cd3ccf668b043d83d4bdd006591ba995e1

    • SHA512

      c59fc3ae264e239634711cb0f93ca7f182685573a10cf45244df2592d0f49fc2c0b13ac97e4cac58a08b34d1b9f34800900a8c451089abe629f7fd5bf56dacd6

    • SSDEEP

      3072:UXM1q69ZTBQTlS5AsMk/jJXagjlD0OdEzWfL1vKU6d0K55ghrnCM/h3BsxkgaBCF:QoUT9sTbJl0cEq5vKLd0UurnCniga

    Score
    10/10
    smokeloaderbackdoortrojan

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks