Overview

overview

10

Static

static

dridex

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    fa6974932d96986c02c70893ab583a6fa5e620b100037dfc535a8c54392a0c1a

  • Size

    270KB

  • Sample

    221010-ezg4msagcm

  • MD5

    faf2a2ea28f99e7991e29476d71a409c

  • SHA1

    26e233825fcdfc442d70fa7ec792d61744196b23

  • SHA256

    fa6974932d96986c02c70893ab583a6fa5e620b100037dfc535a8c54392a0c1a

  • SHA512

    481b80254b80b15b610970f28564d0a6886b8f1951d3164b5bdbdf580e3d9031808f05fbb35b52aef478c443f518dd0a4c2c5c59acfe1b170dfc475b71911ea2

  • SSDEEP

    3072:gXhC938a4eOUW+ze2MVO5zLGBHDWXu7dXX4xEDM/h3qpZa9uD6VdyhkhUuS:U8sFqeBULsHqUXI+rwVfquS

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Targets

    • Target

      fa6974932d96986c02c70893ab583a6fa5e620b100037dfc535a8c54392a0c1a

    • Size

      270KB

    • MD5

      faf2a2ea28f99e7991e29476d71a409c

    • SHA1

      26e233825fcdfc442d70fa7ec792d61744196b23

    • SHA256

      fa6974932d96986c02c70893ab583a6fa5e620b100037dfc535a8c54392a0c1a

    • SHA512

      481b80254b80b15b610970f28564d0a6886b8f1951d3164b5bdbdf580e3d9031808f05fbb35b52aef478c443f518dd0a4c2c5c59acfe1b170dfc475b71911ea2

    • SSDEEP

      3072:gXhC938a4eOUW+ze2MVO5zLGBHDWXu7dXX4xEDM/h3qpZa9uD6VdyhkhUuS:U8sFqeBULsHqUXI+rwVfquS

    Score
    10/10
    smokeloaderbackdoortrojan

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Deletes itself

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks