Overview

overview

10

Static

static

dridex

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6004c91235ec62d53b1b8b96b1148af696fc0e40ee81f0f7d4d81a46c82aa4e3

  • Size

    194KB

  • Sample

    221020-1jrh2afffp

  • MD5

    4c2b4c5a8deb589cd21814d23bbf27c0

  • SHA1

    cbf684f2425f65ffad7888944bb44fbd5a86943e

  • SHA256

    6004c91235ec62d53b1b8b96b1148af696fc0e40ee81f0f7d4d81a46c82aa4e3

  • SHA512

    3bb3530c1ec8e765e23ac026569a3edc6f6734492e8d2e23fe06641707b370afa948690a71354b5502c76366105af357d07499bc43e833e550942f52ed51f5d9

  • SSDEEP

    3072:XXm4jLKM7u6bA5xGteDYo7608WUC8qpSUuqVruObs0KXiyjpZ:HFjLNuKeTDYo76WUqpS1qZuOA0miy

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Targets

    • Target

      6004c91235ec62d53b1b8b96b1148af696fc0e40ee81f0f7d4d81a46c82aa4e3

    • Size

      194KB

    • MD5

      4c2b4c5a8deb589cd21814d23bbf27c0

    • SHA1

      cbf684f2425f65ffad7888944bb44fbd5a86943e

    • SHA256

      6004c91235ec62d53b1b8b96b1148af696fc0e40ee81f0f7d4d81a46c82aa4e3

    • SHA512

      3bb3530c1ec8e765e23ac026569a3edc6f6734492e8d2e23fe06641707b370afa948690a71354b5502c76366105af357d07499bc43e833e550942f52ed51f5d9

    • SSDEEP

      3072:XXm4jLKM7u6bA5xGteDYo7608WUC8qpSUuqVruObs0KXiyjpZ:HFjLNuKeTDYo76WUqpS1qZuOA0miy

    Score
    10/10
    smokeloaderbackdoortrojan

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Deletes itself

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks