Overview

overview

10

Static

static

dridex

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ee7cb4c6a3b0640e6c283dcef86df6f72cae46797d75919d352e3935e8ceee88

  • Size

    303KB

  • Sample

    221104-xgjtmabghm

  • MD5

    b093d88aa46f0be434935530343d08fb

  • SHA1

    0748eca7e8503018d90112d0c2d5f4c1b8ad3205

  • SHA256

    ee7cb4c6a3b0640e6c283dcef86df6f72cae46797d75919d352e3935e8ceee88

  • SHA512

    e45e8f83660b2c3d2a4575c09c103a7340019d3614dfa90276f48c56061dbddee0b706dca4111d69eaedfd4dd66b8989b3eef28eba5df936aecdbccf90a3c05f

  • SSDEEP

    3072:hR+kTdVvrkxP5Fp91ztmIhv6+Z7+SERnHa9a1i+F4cqCd8T:n+kTcBp91zMQynHatwUCd+

Score
10/10
smokeloaderbackdoordiscoverytrojan

Malware Config

Targets

    • Target

      ee7cb4c6a3b0640e6c283dcef86df6f72cae46797d75919d352e3935e8ceee88

    • Size

      303KB

    • MD5

      b093d88aa46f0be434935530343d08fb

    • SHA1

      0748eca7e8503018d90112d0c2d5f4c1b8ad3205

    • SHA256

      ee7cb4c6a3b0640e6c283dcef86df6f72cae46797d75919d352e3935e8ceee88

    • SHA512

      e45e8f83660b2c3d2a4575c09c103a7340019d3614dfa90276f48c56061dbddee0b706dca4111d69eaedfd4dd66b8989b3eef28eba5df936aecdbccf90a3c05f

    • SSDEEP

      3072:hR+kTdVvrkxP5Fp91ztmIhv6+Z7+SERnHa9a1i+F4cqCd8T:n+kTcBp91zMQynHatwUCd+

    Score
    10/10
    smokeloaderbackdoordiscoverytrojan

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks