Overview

overview

10

Static

static

dridex

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ab1b0fa623cbdb0a88f78c55854f1566a83bedf9cd30e347f3b945792c7f503f

  • Size

    197KB

  • Sample

    220924-3ffy8scde5

  • MD5

    4d5f07dcd91c390bf51133d77a7c4e6b

  • SHA1

    4e89d921405d54290567d3e85cc0b8cf6c8d7028

  • SHA256

    ab1b0fa623cbdb0a88f78c55854f1566a83bedf9cd30e347f3b945792c7f503f

  • SHA512

    f03e9ef0f3df18cf1c9b391a283300d6a80df6d298ce112598bd938bce33c818cb46a5bce6376c68b315c50ea9785b0a7a54778a470738d9a6da39e4669f1ad9

  • SSDEEP

    3072:gvz4siL84AFaN52/Y57tc8dWn67TAGvGBt88/PkkXx:XLOFv+7rs6p

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Targets

    • Target

      ab1b0fa623cbdb0a88f78c55854f1566a83bedf9cd30e347f3b945792c7f503f

    • Size

      197KB

    • MD5

      4d5f07dcd91c390bf51133d77a7c4e6b

    • SHA1

      4e89d921405d54290567d3e85cc0b8cf6c8d7028

    • SHA256

      ab1b0fa623cbdb0a88f78c55854f1566a83bedf9cd30e347f3b945792c7f503f

    • SHA512

      f03e9ef0f3df18cf1c9b391a283300d6a80df6d298ce112598bd938bce33c818cb46a5bce6376c68b315c50ea9785b0a7a54778a470738d9a6da39e4669f1ad9

    • SSDEEP

      3072:gvz4siL84AFaN52/Y57tc8dWn67TAGvGBt88/PkkXx:XLOFv+7rs6p

    Score
    10/10
    smokeloaderbackdoortrojan

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks