Overview

overview

10

Static

static

dridex

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    257d9a50c4dff1ec4bf1003fc3b603512ba4c9975cb977dce398d561b932a5a1

  • Size

    339KB

  • Sample

    221101-w2qx1aebe8

  • MD5

    c835fdbcbd98bd2e0b166ab71fac5032

  • SHA1

    99c1542d37cc2d56d18760b7ef393474f8bf5124

  • SHA256

    257d9a50c4dff1ec4bf1003fc3b603512ba4c9975cb977dce398d561b932a5a1

  • SHA512

    3700402536dca5c7162085ffa235e6528d11e0c45d798163dcc7e0308832be247795ed6263297d467616bb20e39a5f093bded1bfdaff169f218ba43c7a4a53f5

  • SSDEEP

    3072:+bmn+1tQuzI1nfG5bESP8rjcusB3+3/fWzoS7uZoVggjcGkNIVqI:pn+3HyfyESybmunWzoSF7ITsq

Score
10/10
smokeloaderbackdoordiscoverytrojan

Malware Config

Targets

    • Target

      257d9a50c4dff1ec4bf1003fc3b603512ba4c9975cb977dce398d561b932a5a1

    • Size

      339KB

    • MD5

      c835fdbcbd98bd2e0b166ab71fac5032

    • SHA1

      99c1542d37cc2d56d18760b7ef393474f8bf5124

    • SHA256

      257d9a50c4dff1ec4bf1003fc3b603512ba4c9975cb977dce398d561b932a5a1

    • SHA512

      3700402536dca5c7162085ffa235e6528d11e0c45d798163dcc7e0308832be247795ed6263297d467616bb20e39a5f093bded1bfdaff169f218ba43c7a4a53f5

    • SSDEEP

      3072:+bmn+1tQuzI1nfG5bESP8rjcusB3+3/fWzoS7uZoVggjcGkNIVqI:pn+3HyfyESybmunWzoSF7ITsq

    Score
    10/10
    smokeloaderbackdoordiscoverytrojan

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks