Overview

overview

10

Static

static

dridex

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    6d755e48b8f3e6c06c4a63675ad3cd33dffe44f8a9c01a7a5fb6713308639633

  • Size

    284KB

  • Sample

    220929-wy724sbff8

  • MD5

    294ca5d7def8685a2000a4217e6b2946

  • SHA1

    6dcefe6e35c2a4228affefb17d22d558815b4cb5

  • SHA256

    6d755e48b8f3e6c06c4a63675ad3cd33dffe44f8a9c01a7a5fb6713308639633

  • SHA512

    88714d7073956c73611f471007f082469be1e7fc77f25e23c15be59c28e6e0c47fdbf5794e8d1e4f586ef05634864a3c3f7c346b31083b787f03c1709cbd321d

  • SSDEEP

    6144:W2tan2gK94JwlUDSyAQVhnWLmuzbgwuO0P2jGbuwVfgzL:W9q9zUDS6rWCunnwP9+z

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Targets

    • Target

      6d755e48b8f3e6c06c4a63675ad3cd33dffe44f8a9c01a7a5fb6713308639633

    • Size

      284KB

    • MD5

      294ca5d7def8685a2000a4217e6b2946

    • SHA1

      6dcefe6e35c2a4228affefb17d22d558815b4cb5

    • SHA256

      6d755e48b8f3e6c06c4a63675ad3cd33dffe44f8a9c01a7a5fb6713308639633

    • SHA512

      88714d7073956c73611f471007f082469be1e7fc77f25e23c15be59c28e6e0c47fdbf5794e8d1e4f586ef05634864a3c3f7c346b31083b787f03c1709cbd321d

    • SSDEEP

      6144:W2tan2gK94JwlUDSyAQVhnWLmuzbgwuO0P2jGbuwVfgzL:W9q9zUDS6rWCunnwP9+z

    Score
    10/10
    smokeloaderbackdoortrojan

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Deletes itself

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks