Overview

overview

10

Static

static

dridex

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3b4612b12159303021938158e27b6f99c8539e14aa08f3b27e5c919ed9006775

  • Size

    260KB

  • Sample

    221027-lzkcbsbggr

  • MD5

    708e7f2aaa80347c8813cab1e76d1599

  • SHA1

    20183660b5b67d2e60b77755a86ded4c493e5c1d

  • SHA256

    3b4612b12159303021938158e27b6f99c8539e14aa08f3b27e5c919ed9006775

  • SHA512

    7df8761dca9e8a08a19e60367a5a5b5f4c5a1c60d6395a822e2f8aef77214c44b965ccb2042c184248fadaf2b6e1d0182ce80be489e98028bb869f7d8babcc8f

  • SSDEEP

    3072:XXC0oW2YkQ0UOqXJbS5tDA45qnERjZFjM+r9EESLvVl7GUAFR/wjiW0Kc:Hlp22DOqXJM0MGsjnMaEJx1vuwiW0

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Targets

    • Target

      3b4612b12159303021938158e27b6f99c8539e14aa08f3b27e5c919ed9006775

    • Size

      260KB

    • MD5

      708e7f2aaa80347c8813cab1e76d1599

    • SHA1

      20183660b5b67d2e60b77755a86ded4c493e5c1d

    • SHA256

      3b4612b12159303021938158e27b6f99c8539e14aa08f3b27e5c919ed9006775

    • SHA512

      7df8761dca9e8a08a19e60367a5a5b5f4c5a1c60d6395a822e2f8aef77214c44b965ccb2042c184248fadaf2b6e1d0182ce80be489e98028bb869f7d8babcc8f

    • SSDEEP

      3072:XXC0oW2YkQ0UOqXJbS5tDA45qnERjZFjM+r9EESLvVl7GUAFR/wjiW0Kc:Hlp22DOqXJM0MGsjnMaEJx1vuwiW0

    Score
    10/10
    smokeloaderbackdoortrojan

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Executes dropped EXE

    • Deletes itself

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks