Overview

overview

10

Static

static

dridex

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0f4344698869d803ca552d34c04a1f9c8edd32674129f9a50093cda6ba430558

  • Size

    322KB

  • Sample

    221102-gcsmzahfe9

  • MD5

    d17fb17435581d4430b7f49b05755003

  • SHA1

    8bb216314697b0382a996e1ecade8717644a9613

  • SHA256

    0f4344698869d803ca552d34c04a1f9c8edd32674129f9a50093cda6ba430558

  • SHA512

    2a6aa3c51fba98d06eb332d71c9270a282d3e6617d476632f4ee9bb01fd90fffaae6d7c985d97afadd34cdc58e4bb86a25ab5e426372a1266ac99e5f4594a241

  • SSDEEP

    3072:418+SM0oQXyDc5O+5jU6DnyNc/vBswWWfb3FWZow7onyvXSuHsJVggjcGkNIVqI8:q8+MXyR+54tDEF8owvXNMr7ITsqF

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Targets

    • Target

      0f4344698869d803ca552d34c04a1f9c8edd32674129f9a50093cda6ba430558

    • Size

      322KB

    • MD5

      d17fb17435581d4430b7f49b05755003

    • SHA1

      8bb216314697b0382a996e1ecade8717644a9613

    • SHA256

      0f4344698869d803ca552d34c04a1f9c8edd32674129f9a50093cda6ba430558

    • SHA512

      2a6aa3c51fba98d06eb332d71c9270a282d3e6617d476632f4ee9bb01fd90fffaae6d7c985d97afadd34cdc58e4bb86a25ab5e426372a1266ac99e5f4594a241

    • SSDEEP

      3072:418+SM0oQXyDc5O+5jU6DnyNc/vBswWWfb3FWZow7onyvXSuHsJVggjcGkNIVqI8:q8+MXyR+54tDEF8owvXNMr7ITsqF

    Score
    10/10
    smokeloaderbackdoortrojan

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Deletes itself

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks