Overview

overview

10

Static

static

dridex

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    65de181aad7087a1ca915ea0393099a67d816d96501cbc0491133985719d4a6e

  • Size

    294KB

  • Sample

    221103-afmskachg5

  • MD5

    16af9c995469285a826b48b89cd17104

  • SHA1

    ea5eecd197e929449fc5552865d72af47948709d

  • SHA256

    65de181aad7087a1ca915ea0393099a67d816d96501cbc0491133985719d4a6e

  • SHA512

    eb76925ed092474b7f0fb190ab78153510ccc9f3e30ba4004dd78a55ee215245f2582926cd729e5a46fafdc7ee10ffa8f74da7c5749558c973a4bd9ffebaff2b

  • SSDEEP

    3072:o8B47uLdlgYFBk57GSJGKeBeAwmHHpboj/WyrgrrdOodfi3p6mAoxfKePl4:dBZLQ4m7JKXw4Oj/N+Up6ToxfKU

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Targets

    • Target

      65de181aad7087a1ca915ea0393099a67d816d96501cbc0491133985719d4a6e

    • Size

      294KB

    • MD5

      16af9c995469285a826b48b89cd17104

    • SHA1

      ea5eecd197e929449fc5552865d72af47948709d

    • SHA256

      65de181aad7087a1ca915ea0393099a67d816d96501cbc0491133985719d4a6e

    • SHA512

      eb76925ed092474b7f0fb190ab78153510ccc9f3e30ba4004dd78a55ee215245f2582926cd729e5a46fafdc7ee10ffa8f74da7c5749558c973a4bd9ffebaff2b

    • SSDEEP

      3072:o8B47uLdlgYFBk57GSJGKeBeAwmHHpboj/WyrgrrdOodfi3p6mAoxfKePl4:dBZLQ4m7JKXw4Oj/N+Up6ToxfKU

    Score
    10/10
    smokeloaderbackdoortrojan

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Executes dropped EXE

    • Deletes itself

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks