Overview

overview

10

Static

static

dridex

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4a88018f5d8dd6f631750b336abc73804fa1ce7ed707cbfa4cfb7d106a5d1264

  • Size

    286KB

  • Sample

    221030-lwchbaehgn

  • MD5

    4153711123a19a1c24900a2cb6e41e1d

  • SHA1

    cb6c9313ce056fb69a8e94587d7805d2346615e3

  • SHA256

    4a88018f5d8dd6f631750b336abc73804fa1ce7ed707cbfa4cfb7d106a5d1264

  • SHA512

    bada9f71f607071190d6a1784ca58e1b788a29da668ed131a886aa5ff7db44852481245a2696b67e8a5c16d55e19997f4ce971005d7d35617412cbfdfe3dc479

  • SSDEEP

    3072:pYG/+IUFvLLHTNKhld5PkygiAiyV/AVp2xON9b4t5+T2/COsBZLyM/h3:tUFvLLHTNKhTgitCApMONm42qbB9y

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Targets

    • Target

      4a88018f5d8dd6f631750b336abc73804fa1ce7ed707cbfa4cfb7d106a5d1264

    • Size

      286KB

    • MD5

      4153711123a19a1c24900a2cb6e41e1d

    • SHA1

      cb6c9313ce056fb69a8e94587d7805d2346615e3

    • SHA256

      4a88018f5d8dd6f631750b336abc73804fa1ce7ed707cbfa4cfb7d106a5d1264

    • SHA512

      bada9f71f607071190d6a1784ca58e1b788a29da668ed131a886aa5ff7db44852481245a2696b67e8a5c16d55e19997f4ce971005d7d35617412cbfdfe3dc479

    • SSDEEP

      3072:pYG/+IUFvLLHTNKhld5PkygiAiyV/AVp2xON9b4t5+T2/COsBZLyM/h3:tUFvLLHTNKhTgitCApMONm42qbB9y

    Score
    10/10
    smokeloaderbackdoortrojan

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Deletes itself

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks