Overview

overview

10

Static

static

dridex

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    664b80ddbcbb2c9d74bdbaf1684daa45d734b949faf6c4d6e56570fc323bb921

  • Size

    300KB

  • Sample

    220917-c34qpschgk

  • MD5

    5600d1bdef93aedb094e472c91f4c770

  • SHA1

    e40e649ba84f7622907f29e265ce4583b4c88a15

  • SHA256

    664b80ddbcbb2c9d74bdbaf1684daa45d734b949faf6c4d6e56570fc323bb921

  • SHA512

    107199c7161d2f379ec26ef51c9851803f78b8a1abf7f033cf71eb1cac5a322abbc75e51d3435b8b4d3cacce4cdf9371f2fac8a93405d9577403eb359713b184

  • SSDEEP

    6144:EHz2LBZcIlPARir6NYDw0GkrnigabwVf:c6dZdlPYa5Xi

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Targets

    • Target

      664b80ddbcbb2c9d74bdbaf1684daa45d734b949faf6c4d6e56570fc323bb921

    • Size

      300KB

    • MD5

      5600d1bdef93aedb094e472c91f4c770

    • SHA1

      e40e649ba84f7622907f29e265ce4583b4c88a15

    • SHA256

      664b80ddbcbb2c9d74bdbaf1684daa45d734b949faf6c4d6e56570fc323bb921

    • SHA512

      107199c7161d2f379ec26ef51c9851803f78b8a1abf7f033cf71eb1cac5a322abbc75e51d3435b8b4d3cacce4cdf9371f2fac8a93405d9577403eb359713b184

    • SSDEEP

      6144:EHz2LBZcIlPARir6NYDw0GkrnigabwVf:c6dZdlPYa5Xi

    Score
    10/10
    smokeloaderbackdoortrojan

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Deletes itself

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks