Overview

overview

10

Static

static

dridex

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    bb9f980edc07ad67ef415ecae51d6433e1423a2e4b7a7a905b814607454fec56

  • Size

    328KB

  • Sample

    220927-vcwxaafafj

  • MD5

    e38b95da23a56bc3ef267713a5807903

  • SHA1

    40fc9ab918879cd500e7384dc80b0525fcbe7dd0

  • SHA256

    bb9f980edc07ad67ef415ecae51d6433e1423a2e4b7a7a905b814607454fec56

  • SHA512

    127396194bded0b5b43be5011af4d9197c3365764b94ca60b19cc7aee5820cd2da7cc6f49547ced9371fc988389971d22df3f1607fee1cc04053d19b737eb98f

  • SSDEEP

    6144:F7VtzOz7TU+hJGEcTfPJJHBqF0MQnigabwVfs:F7VBu7T7JafPJJHBfNiB

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Targets

    • Target

      bb9f980edc07ad67ef415ecae51d6433e1423a2e4b7a7a905b814607454fec56

    • Size

      328KB

    • MD5

      e38b95da23a56bc3ef267713a5807903

    • SHA1

      40fc9ab918879cd500e7384dc80b0525fcbe7dd0

    • SHA256

      bb9f980edc07ad67ef415ecae51d6433e1423a2e4b7a7a905b814607454fec56

    • SHA512

      127396194bded0b5b43be5011af4d9197c3365764b94ca60b19cc7aee5820cd2da7cc6f49547ced9371fc988389971d22df3f1607fee1cc04053d19b737eb98f

    • SSDEEP

      6144:F7VtzOz7TU+hJGEcTfPJJHBqF0MQnigabwVfs:F7VBu7T7JafPJJHBfNiB

    Score
    10/10
    smokeloaderbackdoortrojan

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Deletes itself

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks