Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

dridex

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3c38db571f68ad5e579b6638f344da22b733eafaca91d82f88bfd4545cab2204

  • Size

    291KB

  • Sample

    220918-qq6w7abce4

  • MD5

    2858c95b4eda85dd9b715caa11325486

  • SHA1

    9e6c401da9cfbd632fcb234c5d2b8075bba32fa6

  • SHA256

    3c38db571f68ad5e579b6638f344da22b733eafaca91d82f88bfd4545cab2204

  • SHA512

    b7a7691d44fdd4eb655180666fb931da55ee2cebfb1543b191ddce2512d1d3f75b17f266ee5432037c02074091ed9e1af9b00ef0b32deaa24a254f5ff08b5ba0

  • SSDEEP

    6144:AI2YdHLLr7xi9tHmugciU6ah00tQ+4nigabwVf:AST7xUtZsz0aFi

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Targets

    • Target

      3c38db571f68ad5e579b6638f344da22b733eafaca91d82f88bfd4545cab2204

    • Size

      291KB

    • MD5

      2858c95b4eda85dd9b715caa11325486

    • SHA1

      9e6c401da9cfbd632fcb234c5d2b8075bba32fa6

    • SHA256

      3c38db571f68ad5e579b6638f344da22b733eafaca91d82f88bfd4545cab2204

    • SHA512

      b7a7691d44fdd4eb655180666fb931da55ee2cebfb1543b191ddce2512d1d3f75b17f266ee5432037c02074091ed9e1af9b00ef0b32deaa24a254f5ff08b5ba0

    • SSDEEP

      6144:AI2YdHLLr7xi9tHmugciU6ah00tQ+4nigabwVf:AST7xUtZsz0aFi

    Score
    10/10
    smokeloaderbackdoortrojan

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Executes dropped EXE

    • Deletes itself

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks