Overview

overview

10

Static

static

dridex

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5efc24b4685adc56e71dce962bfe8430a3ae226987e95421a011a9503549400d

  • Size

    280KB

  • Sample

    220922-3zpeqageen

  • MD5

    d4a1d6fdbd12881069390066d6832bfd

  • SHA1

    06b83748c33ac3e3ad95c73d0ca3e6bcef91d8af

  • SHA256

    5efc24b4685adc56e71dce962bfe8430a3ae226987e95421a011a9503549400d

  • SHA512

    6b446d18662cc5f409f8016e939ef4b1cab3233a37238effe5520ed1bad4654c06dc1d72cd9dea68118a37f48a13f655aaab4a47e51d5d711133dcc6ec1fde66

  • SSDEEP

    6144:17vuTCP6LJ3wHtSWtWaRXKUlxK0CwABL5/wigavwVf:17muil3wHtSWUCXVTBABr

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Targets

    • Target

      5efc24b4685adc56e71dce962bfe8430a3ae226987e95421a011a9503549400d

    • Size

      280KB

    • MD5

      d4a1d6fdbd12881069390066d6832bfd

    • SHA1

      06b83748c33ac3e3ad95c73d0ca3e6bcef91d8af

    • SHA256

      5efc24b4685adc56e71dce962bfe8430a3ae226987e95421a011a9503549400d

    • SHA512

      6b446d18662cc5f409f8016e939ef4b1cab3233a37238effe5520ed1bad4654c06dc1d72cd9dea68118a37f48a13f655aaab4a47e51d5d711133dcc6ec1fde66

    • SSDEEP

      6144:17vuTCP6LJ3wHtSWtWaRXKUlxK0CwABL5/wigavwVf:17muil3wHtSWUCXVTBABr

    Score
    10/10
    smokeloaderbackdoortrojan

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Deletes itself

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks