Overview

overview

10

Static

static

dridex

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e15f9e0b0236b8d07fd4386c9a10ffc03da5a53d7a24fab47de3d85890b335a2

  • Size

    133KB

  • Sample

    221002-ws29nsfdc5

  • MD5

    38e838a63d7f1f21339707c3ccd7df72

  • SHA1

    551503a13a776b75e57549d82db5065a2948b890

  • SHA256

    e15f9e0b0236b8d07fd4386c9a10ffc03da5a53d7a24fab47de3d85890b335a2

  • SHA512

    10a79e838b7ab6f0f4a0c38fde545d57a18deedcbcfdbfd565743b2f120292acad488cf0a658a0b07dd27626c46ed3b1116a338527a191e30dae0b3676fa49c7

  • SSDEEP

    3072:NgZePORO9QFX0cjlVRg1EIavvGlVblBNY7PAsnUCyG:BT9g0GsaWl08sNy

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Targets

    • Target

      e15f9e0b0236b8d07fd4386c9a10ffc03da5a53d7a24fab47de3d85890b335a2

    • Size

      133KB

    • MD5

      38e838a63d7f1f21339707c3ccd7df72

    • SHA1

      551503a13a776b75e57549d82db5065a2948b890

    • SHA256

      e15f9e0b0236b8d07fd4386c9a10ffc03da5a53d7a24fab47de3d85890b335a2

    • SHA512

      10a79e838b7ab6f0f4a0c38fde545d57a18deedcbcfdbfd565743b2f120292acad488cf0a658a0b07dd27626c46ed3b1116a338527a191e30dae0b3676fa49c7

    • SSDEEP

      3072:NgZePORO9QFX0cjlVRg1EIavvGlVblBNY7PAsnUCyG:BT9g0GsaWl08sNy

    Score
    10/10
    smokeloaderbackdoortrojan

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Deletes itself

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks