Overview

overview

10

Static

static

dridex

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0ceb9844896f62db9fbdfa5c2d4b849923b7af1584ade1d715c0283406a95ded

  • Size

    300KB

  • Sample

    220917-f2shtsdbaq

  • MD5

    4c3bfdf0f059281d2b0917eceb44f86f

  • SHA1

    d1a487faf981faedb44a48fa8d235edcafa95f35

  • SHA256

    0ceb9844896f62db9fbdfa5c2d4b849923b7af1584ade1d715c0283406a95ded

  • SHA512

    3e7190e52cdfef43782b6086ec6c05db0837b57562b09130ae834fcae9df8ed4b0a86afcf5b885929863a85b1b8717e3220f1eb0c9a22bca3388508beac00280

  • SSDEEP

    3072:4FXMqtFpm9cVL+VUAeNI9RNLXoQ1cRgiNgYd09ss0KURFawxM/h3BsxkgaBChU/O:8MqjLdA5sQEhd0ys0BPawxnigabwVf

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Targets

    • Target

      0ceb9844896f62db9fbdfa5c2d4b849923b7af1584ade1d715c0283406a95ded

    • Size

      300KB

    • MD5

      4c3bfdf0f059281d2b0917eceb44f86f

    • SHA1

      d1a487faf981faedb44a48fa8d235edcafa95f35

    • SHA256

      0ceb9844896f62db9fbdfa5c2d4b849923b7af1584ade1d715c0283406a95ded

    • SHA512

      3e7190e52cdfef43782b6086ec6c05db0837b57562b09130ae834fcae9df8ed4b0a86afcf5b885929863a85b1b8717e3220f1eb0c9a22bca3388508beac00280

    • SSDEEP

      3072:4FXMqtFpm9cVL+VUAeNI9RNLXoQ1cRgiNgYd09ss0KURFawxM/h3BsxkgaBChU/O:8MqjLdA5sQEhd0ys0BPawxnigabwVf

    Score
    10/10
    smokeloaderbackdoortrojan

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Deletes itself

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks