Overview

overview

10

Static

static

dridex

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a7955c48cd5376a6a8c7640010b7f027be60f7f531140d1706c8c77627d889c7

  • Size

    229KB

  • Sample

    221019-n9bjaagaep

  • MD5

    5b9d5828ce6f1ab55f01e90f93ee114f

  • SHA1

    bcad1467dc89735c82af3328371011ad6fbb0f9d

  • SHA256

    a7955c48cd5376a6a8c7640010b7f027be60f7f531140d1706c8c77627d889c7

  • SHA512

    29e0e6d3fa62d5c4dc676785936617fcf5b8f365ba9b3e1ea4bfe38c21a43501598096c277c975154719d2d6986143aa1ce247076aa0430391fa7967668c8ff3

  • SSDEEP

    3072:Qz2dSOITvwjIfe2zLJxQ4T4WsZLfyrIiNKDrVJ+rajkmMIkfQ1TjFda:QzuVI1WyL84T45ZuIiNa+E04Zj

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Targets

    • Target

      a7955c48cd5376a6a8c7640010b7f027be60f7f531140d1706c8c77627d889c7

    • Size

      229KB

    • MD5

      5b9d5828ce6f1ab55f01e90f93ee114f

    • SHA1

      bcad1467dc89735c82af3328371011ad6fbb0f9d

    • SHA256

      a7955c48cd5376a6a8c7640010b7f027be60f7f531140d1706c8c77627d889c7

    • SHA512

      29e0e6d3fa62d5c4dc676785936617fcf5b8f365ba9b3e1ea4bfe38c21a43501598096c277c975154719d2d6986143aa1ce247076aa0430391fa7967668c8ff3

    • SSDEEP

      3072:Qz2dSOITvwjIfe2zLJxQ4T4WsZLfyrIiNKDrVJ+rajkmMIkfQ1TjFda:QzuVI1WyL84T45ZuIiNa+E04Zj

    Score
    10/10
    smokeloaderbackdoortrojan

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Deletes itself

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks