Overview

overview

10

Static

static

dridex

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    f5a80e66a24b7b8fcb8a5e35ad0c4d21053d63bbfc467b0ebda598894bf70266

  • Size

    291KB

  • Sample

    220918-raryrsbch2

  • MD5

    e5a940c116908f30657b46f59f301b7a

  • SHA1

    e47adb1075c256298e651ba53a671d7abe48beac

  • SHA256

    f5a80e66a24b7b8fcb8a5e35ad0c4d21053d63bbfc467b0ebda598894bf70266

  • SHA512

    61e05f4bf117b1736d579fbf09e7e2303e31052c7e6cf24160d15a8fd2c248f617cf4e55dfe4afee284fed13ab5b562b3fad62afd3c76397835e01cc535c0df7

  • SSDEEP

    6144:54ConLJrorz7kL1yV0/5pW0sEnigabwVf:5M1orIgC/zsEi

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Targets

    • Target

      f5a80e66a24b7b8fcb8a5e35ad0c4d21053d63bbfc467b0ebda598894bf70266

    • Size

      291KB

    • MD5

      e5a940c116908f30657b46f59f301b7a

    • SHA1

      e47adb1075c256298e651ba53a671d7abe48beac

    • SHA256

      f5a80e66a24b7b8fcb8a5e35ad0c4d21053d63bbfc467b0ebda598894bf70266

    • SHA512

      61e05f4bf117b1736d579fbf09e7e2303e31052c7e6cf24160d15a8fd2c248f617cf4e55dfe4afee284fed13ab5b562b3fad62afd3c76397835e01cc535c0df7

    • SSDEEP

      6144:54ConLJrorz7kL1yV0/5pW0sEnigabwVf:5M1orIgC/zsEi

    Score
    10/10
    smokeloaderbackdoortrojan

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Deletes itself

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks