Overview

overview

10

Static

static

dridex

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    06d2c872451ffd804e916b411cb99183806f9aeba83b3a7998d07061b59dfdf8

  • Size

    147KB

  • Sample

    220920-xrs52sebg6

  • MD5

    3a3145641b750be1c15d0a4491709172

  • SHA1

    dc303f2d4918da64391e6e09e2aebda59343f8a3

  • SHA256

    06d2c872451ffd804e916b411cb99183806f9aeba83b3a7998d07061b59dfdf8

  • SHA512

    7ef86fbb18fbe4ae8f44e364f0161dcaaa4075eae432aa4644399a41ad5d886d3f30588674c881eb0993eebb6d9456562d6b14d8d1e513e156a01e9846dc3cfe

  • SSDEEP

    3072:9d29GZ05Eu1XzZIf0DUhYI5mE1p+99BAzbzx:H35ulyf0IhY63bUA

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Targets

    • Target

      06d2c872451ffd804e916b411cb99183806f9aeba83b3a7998d07061b59dfdf8

    • Size

      147KB

    • MD5

      3a3145641b750be1c15d0a4491709172

    • SHA1

      dc303f2d4918da64391e6e09e2aebda59343f8a3

    • SHA256

      06d2c872451ffd804e916b411cb99183806f9aeba83b3a7998d07061b59dfdf8

    • SHA512

      7ef86fbb18fbe4ae8f44e364f0161dcaaa4075eae432aa4644399a41ad5d886d3f30588674c881eb0993eebb6d9456562d6b14d8d1e513e156a01e9846dc3cfe

    • SSDEEP

      3072:9d29GZ05Eu1XzZIf0DUhYI5mE1p+99BAzbzx:H35ulyf0IhY63bUA

    Score
    10/10
    smokeloaderbackdoortrojan

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Deletes itself

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks