Overview

overview

10

Static

static

dridex

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    1a8f2260c44d6ca5cc5b99c11af48f748fa765563a080dffcc0e938fc9391246

  • Size

    270KB

  • Sample

    221009-k1r8wsghaj

  • MD5

    88904aeb3d1af691ee1d0955644500f3

  • SHA1

    7876b3b054db2dc23ea9b1f05afc3ae88ee2e264

  • SHA256

    1a8f2260c44d6ca5cc5b99c11af48f748fa765563a080dffcc0e938fc9391246

  • SHA512

    bc1aeec225e036e05267e3178348719d60fe9ef62b4ad190ead2497c437115bfa95debc8a1270245b019e7cfaf8cd70b97ebdfec7979f21691478f811294f6d8

  • SSDEEP

    6144:izo+Msz9TrIOhXowS08H8V0wRWEqrwVfquSl:izzrIOhdrq8+wjqd

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Targets

    • Target

      1a8f2260c44d6ca5cc5b99c11af48f748fa765563a080dffcc0e938fc9391246

    • Size

      270KB

    • MD5

      88904aeb3d1af691ee1d0955644500f3

    • SHA1

      7876b3b054db2dc23ea9b1f05afc3ae88ee2e264

    • SHA256

      1a8f2260c44d6ca5cc5b99c11af48f748fa765563a080dffcc0e938fc9391246

    • SHA512

      bc1aeec225e036e05267e3178348719d60fe9ef62b4ad190ead2497c437115bfa95debc8a1270245b019e7cfaf8cd70b97ebdfec7979f21691478f811294f6d8

    • SSDEEP

      6144:izo+Msz9TrIOhXowS08H8V0wRWEqrwVfquSl:izzrIOhdrq8+wjqd

    Score
    10/10
    smokeloaderbackdoortrojan

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Deletes itself

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks