Overview

overview

10

Static

static

dridex

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bb4b30ba0619fb1672fe95050742eaf51ef1fb8310c9aa0ce267ffff059a2a27

  • Size

    289KB

  • Sample

    220918-le54asehem

  • MD5

    4f0267828ff55742403114ef784c3899

  • SHA1

    342fe9974b809a3eb792815ffbe148b2e3ccc0a0

  • SHA256

    bb4b30ba0619fb1672fe95050742eaf51ef1fb8310c9aa0ce267ffff059a2a27

  • SHA512

    d649d1a7bd51dfe712e4730f80cea611a692bff065698414c6552913088d239aca4fa4503638e9806bf5462cb718ad4e564311cfb44c73974543510c56dd3110

  • SSDEEP

    6144:YyG5zLjYDves/3Vop1dtVa0lcNnigabwVff:Yy2z3YDveomrdWNiY

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Targets

    • Target

      bb4b30ba0619fb1672fe95050742eaf51ef1fb8310c9aa0ce267ffff059a2a27

    • Size

      289KB

    • MD5

      4f0267828ff55742403114ef784c3899

    • SHA1

      342fe9974b809a3eb792815ffbe148b2e3ccc0a0

    • SHA256

      bb4b30ba0619fb1672fe95050742eaf51ef1fb8310c9aa0ce267ffff059a2a27

    • SHA512

      d649d1a7bd51dfe712e4730f80cea611a692bff065698414c6552913088d239aca4fa4503638e9806bf5462cb718ad4e564311cfb44c73974543510c56dd3110

    • SSDEEP

      6144:YyG5zLjYDves/3Vop1dtVa0lcNnigabwVff:Yy2z3YDveomrdWNiY

    Score
    10/10
    smokeloaderbackdoortrojan

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Executes dropped EXE

    • Deletes itself

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks