Overview

overview

10

Static

static

dridex

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    bafebbe296d20d7424e60f24c0bc60671a8f460a2ecea59ac74e2f9cc282f0ab

  • Size

    196KB

  • Sample

    220924-zdkmvsdcbr

  • MD5

    0a57b1df3677473610fbd639efcaff28

  • SHA1

    ccf6b24b3aa4278894494b1fcc122517d93b9d77

  • SHA256

    bafebbe296d20d7424e60f24c0bc60671a8f460a2ecea59ac74e2f9cc282f0ab

  • SHA512

    cad0a8f7f40fad5b763b33bb5b65cf9225cebaa1c21854424bbbc1ecdf7595f4128dc294bbfb7a7581b908d5bf3814e723574adc3fea44728ce483d59784c1c0

  • SSDEEP

    3072:zD0ppLMOIV1A5Bg1iOAjlsmnrPmOg6xXBCsDOAN/PkkXx:4LoVXmrIF

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Targets

    • Target

      bafebbe296d20d7424e60f24c0bc60671a8f460a2ecea59ac74e2f9cc282f0ab

    • Size

      196KB

    • MD5

      0a57b1df3677473610fbd639efcaff28

    • SHA1

      ccf6b24b3aa4278894494b1fcc122517d93b9d77

    • SHA256

      bafebbe296d20d7424e60f24c0bc60671a8f460a2ecea59ac74e2f9cc282f0ab

    • SHA512

      cad0a8f7f40fad5b763b33bb5b65cf9225cebaa1c21854424bbbc1ecdf7595f4128dc294bbfb7a7581b908d5bf3814e723574adc3fea44728ce483d59784c1c0

    • SSDEEP

      3072:zD0ppLMOIV1A5Bg1iOAjlsmnrPmOg6xXBCsDOAN/PkkXx:4LoVXmrIF

    Score
    10/10
    smokeloaderbackdoortrojan

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Deletes itself

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks