Overview

overview

10

Static

static

dridex

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    79d08dccf19acbba04ee47a077bedb496ee8619572f413f76ad0f725bee14acf

  • Size

    133KB

  • Sample

    221003-hmrdbscaf3

  • MD5

    29b7db2d6ded8be1748d13aa93f88c09

  • SHA1

    de37a92371c082729e5fc3418df9f32deec8e4c1

  • SHA256

    79d08dccf19acbba04ee47a077bedb496ee8619572f413f76ad0f725bee14acf

  • SHA512

    b7d92bd30bb2aee990b6a41ac8838fb23480d56327f7965c079277bd934bcf9ba063d33281d821b9a6f96669d6b5451a57051dff25dd9d4d45bc2a4cb69a7ce6

  • SSDEEP

    3072:aCoL9pORH8xlvgt0Rz6AMv68k57Nt3Kfsi:c68LoZAz8oNk

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Targets

    • Target

      79d08dccf19acbba04ee47a077bedb496ee8619572f413f76ad0f725bee14acf

    • Size

      133KB

    • MD5

      29b7db2d6ded8be1748d13aa93f88c09

    • SHA1

      de37a92371c082729e5fc3418df9f32deec8e4c1

    • SHA256

      79d08dccf19acbba04ee47a077bedb496ee8619572f413f76ad0f725bee14acf

    • SHA512

      b7d92bd30bb2aee990b6a41ac8838fb23480d56327f7965c079277bd934bcf9ba063d33281d821b9a6f96669d6b5451a57051dff25dd9d4d45bc2a4cb69a7ce6

    • SSDEEP

      3072:aCoL9pORH8xlvgt0Rz6AMv68k57Nt3Kfsi:c68LoZAz8oNk

    Score
    10/10
    smokeloaderbackdoortrojan

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks