Overview

overview

10

Static

static

dridex

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2e0ba990602e0ec3b6e0cabaecda58e1d6274473abff40953e1676d920236bdf

  • Size

    181KB

  • Sample

    221104-d1sq4acgcm

  • MD5

    d11c15621eed693954ce0f3d4aac51c1

  • SHA1

    07c3cfc9bb8a8b40e4c6bf07f8bca824cab91938

  • SHA256

    2e0ba990602e0ec3b6e0cabaecda58e1d6274473abff40953e1676d920236bdf

  • SHA512

    f443e89ba78da4e6f5476e900b4001cf9bdf77cafd567610f1b4dc5ac5df7e8ab99b6957c00abf0073538541fb72347c0db3aa65aced45c26e98a39b52ce4c72

  • SSDEEP

    3072:kXK+f1cIOR+LW40gfx5H7h9pK1v6B8sN/B7Pt7Ja0QlqtVWb4gnd2J:kXvGIO4L50gTpcSB3jpJa0VzWb4e2

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Targets

    • Target

      2e0ba990602e0ec3b6e0cabaecda58e1d6274473abff40953e1676d920236bdf

    • Size

      181KB

    • MD5

      d11c15621eed693954ce0f3d4aac51c1

    • SHA1

      07c3cfc9bb8a8b40e4c6bf07f8bca824cab91938

    • SHA256

      2e0ba990602e0ec3b6e0cabaecda58e1d6274473abff40953e1676d920236bdf

    • SHA512

      f443e89ba78da4e6f5476e900b4001cf9bdf77cafd567610f1b4dc5ac5df7e8ab99b6957c00abf0073538541fb72347c0db3aa65aced45c26e98a39b52ce4c72

    • SSDEEP

      3072:kXK+f1cIOR+LW40gfx5H7h9pK1v6B8sN/B7Pt7Ja0QlqtVWb4gnd2J:kXvGIO4L50gTpcSB3jpJa0VzWb4e2

    Score
    10/10
    smokeloaderbackdoortrojan

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Executes dropped EXE

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks