Overview

overview

10

Static

static

dridex

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    5e7ecb79ae41ec2a78516c9d77af3e666a2dee47ced5b3007cb2234dd24712f7

  • Size

    231KB

  • Sample

    221014-tnnvdadgf6

  • MD5

    d24cfa0f30d5c1ec980a7b7847915d0f

  • SHA1

    2efb5f1213f50f0b15e21de1088c09da3ebd2442

  • SHA256

    5e7ecb79ae41ec2a78516c9d77af3e666a2dee47ced5b3007cb2234dd24712f7

  • SHA512

    d3ac628b61a74664a7c6153760ef12cc696592f722dbc258b3f7336f8de0182bd82edd556b9938a83d3d4a0d5bc583a1f625f026d679e2da895e4e7ad85fec37

  • SSDEEP

    3072:75XN9VuNrkCwcPc6xC1pG5rrcAefuFuqiXGnBkseWLR9dicYf0K8AVPPD:5oNrtwmE1CIAsuAqi2nBte0fdRYf00

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Targets

    • Target

      5e7ecb79ae41ec2a78516c9d77af3e666a2dee47ced5b3007cb2234dd24712f7

    • Size

      231KB

    • MD5

      d24cfa0f30d5c1ec980a7b7847915d0f

    • SHA1

      2efb5f1213f50f0b15e21de1088c09da3ebd2442

    • SHA256

      5e7ecb79ae41ec2a78516c9d77af3e666a2dee47ced5b3007cb2234dd24712f7

    • SHA512

      d3ac628b61a74664a7c6153760ef12cc696592f722dbc258b3f7336f8de0182bd82edd556b9938a83d3d4a0d5bc583a1f625f026d679e2da895e4e7ad85fec37

    • SSDEEP

      3072:75XN9VuNrkCwcPc6xC1pG5rrcAefuFuqiXGnBkseWLR9dicYf0K8AVPPD:5oNrtwmE1CIAsuAqi2nBte0fdRYf00

    Score
    10/10
    smokeloaderbackdoortrojan

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Deletes itself

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks