Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

dridex

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ecf505c4260349befe0e6e52e560c5f1a6fdb4785cfb8c5201c9a91914447747

  • Size

    266KB

  • Sample

    220916-nyscnabdcm

  • MD5

    420f55d4c76e1359ce3c2a00957e845c

  • SHA1

    db006a9bf29e158bec6eb9c80f4bb7bdd2e6d56f

  • SHA256

    ecf505c4260349befe0e6e52e560c5f1a6fdb4785cfb8c5201c9a91914447747

  • SHA512

    70d157a772602088d0442b6cce4befcfbbeff61c0238272669bccea667fa9d81862ee3012f77a94c7c51dc563eed134e7c4763e61c3612d5fdae743e30ba0924

  • SSDEEP

    3072:sXH5ZONbFA5IL58xQs37d4fbSXexu+hkMdTVJJ0KheHUltM/h3BsxkgaBChU6e:oSbTL654fbSOo+SoDJ00eutniga

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Targets

    • Target

      ecf505c4260349befe0e6e52e560c5f1a6fdb4785cfb8c5201c9a91914447747

    • Size

      266KB

    • MD5

      420f55d4c76e1359ce3c2a00957e845c

    • SHA1

      db006a9bf29e158bec6eb9c80f4bb7bdd2e6d56f

    • SHA256

      ecf505c4260349befe0e6e52e560c5f1a6fdb4785cfb8c5201c9a91914447747

    • SHA512

      70d157a772602088d0442b6cce4befcfbbeff61c0238272669bccea667fa9d81862ee3012f77a94c7c51dc563eed134e7c4763e61c3612d5fdae743e30ba0924

    • SSDEEP

      3072:sXH5ZONbFA5IL58xQs37d4fbSXexu+hkMdTVJJ0KheHUltM/h3BsxkgaBChU6e:oSbTL654fbSOo+SoDJ00eutniga

    Score
    10/10
    smokeloaderbackdoortrojan

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Deletes itself

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks