Overview

overview

10

Static

static

dridex

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2b00a3c2aebefef5658de981467908883a74b5ffe00bb416158c9743b154b397

  • Size

    266KB

  • Sample

    220916-l672zafch4

  • MD5

    2dc1e4398a3aa8390e686576b9ad68c8

  • SHA1

    66e691204b837ee96a9e406c94420aa0d4dcb14c

  • SHA256

    2b00a3c2aebefef5658de981467908883a74b5ffe00bb416158c9743b154b397

  • SHA512

    18c10899ea2db677beb1461fcd514c19f684e4cd7a0e5befdf3a1313c7af6c8aa6cbe674d8f8a1cce0253ae2eec4004873d6c39bd3dc54098feccee9cced47c5

  • SSDEEP

    3072:KXGBikJ00TNA5nCDGuRP0m6ExSAd46TH0AP+DF0KPF0QVRXM/h3BsxkgaBChU6e:qZ0TU3ZvAddTUC+DF0c0IRXniga

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Targets

    • Target

      2b00a3c2aebefef5658de981467908883a74b5ffe00bb416158c9743b154b397

    • Size

      266KB

    • MD5

      2dc1e4398a3aa8390e686576b9ad68c8

    • SHA1

      66e691204b837ee96a9e406c94420aa0d4dcb14c

    • SHA256

      2b00a3c2aebefef5658de981467908883a74b5ffe00bb416158c9743b154b397

    • SHA512

      18c10899ea2db677beb1461fcd514c19f684e4cd7a0e5befdf3a1313c7af6c8aa6cbe674d8f8a1cce0253ae2eec4004873d6c39bd3dc54098feccee9cced47c5

    • SSDEEP

      3072:KXGBikJ00TNA5nCDGuRP0m6ExSAd46TH0AP+DF0KPF0QVRXM/h3BsxkgaBChU6e:qZ0TU3ZvAddTUC+DF0c0IRXniga

    Score
    10/10
    smokeloaderbackdoortrojan

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Deletes itself

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks