Overview

overview

10

Static

static

dridex

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2d41311589d1eeb325f17e1a54905b8f92f81163e082cb27ca217c58c3b6fa86

  • Size

    339KB

  • Sample

    221101-17js4afec3

  • MD5

    635abce6fa742a72d6da67405f86073a

  • SHA1

    02f84427f4f60f51fe3a2eddd3a5b80a8a10243a

  • SHA256

    2d41311589d1eeb325f17e1a54905b8f92f81163e082cb27ca217c58c3b6fa86

  • SHA512

    1210a21c2a161de209b855c8c292738d79064432215ba34820d4706f1496cb201d8f5e6d16fffaf3aa5721d5bab16d555083e7fcdbac5c19f1bc3f03954f214b

  • SSDEEP

    6144:aniV0JY6/oHl+Lk7bpzz5VWRi27iKyjdr7ITsq/:anhC6/oHlZpZ7

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Targets

    • Target

      2d41311589d1eeb325f17e1a54905b8f92f81163e082cb27ca217c58c3b6fa86

    • Size

      339KB

    • MD5

      635abce6fa742a72d6da67405f86073a

    • SHA1

      02f84427f4f60f51fe3a2eddd3a5b80a8a10243a

    • SHA256

      2d41311589d1eeb325f17e1a54905b8f92f81163e082cb27ca217c58c3b6fa86

    • SHA512

      1210a21c2a161de209b855c8c292738d79064432215ba34820d4706f1496cb201d8f5e6d16fffaf3aa5721d5bab16d555083e7fcdbac5c19f1bc3f03954f214b

    • SSDEEP

      6144:aniV0JY6/oHl+Lk7bpzz5VWRi27iKyjdr7ITsq/:anhC6/oHlZpZ7

    Score
    10/10
    smokeloaderbackdoortrojan

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Deletes itself

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks