Overview

overview

10

Static

static

dridex

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    ab3f8033fc78e7618a61832e441cef5133e6ffd88ec743a296ba37a6aa4b45cd

  • Size

    285KB

  • Sample

    221105-z25b6shgb6

  • MD5

    7766e948395f47f942c37081733abe70

  • SHA1

    4594f328e42698f224c7d9a1697e2b77b2b65426

  • SHA256

    ab3f8033fc78e7618a61832e441cef5133e6ffd88ec743a296ba37a6aa4b45cd

  • SHA512

    848ef6376dfdaf25776350a0b7433c453b27b11c43c7589dd8870bb2a93bc59c1dcdf14de7cccad9f0ac07b350a07115c97df3e5105fe6673dcb9dadd34b6623

  • SSDEEP

    3072:1zwqz9qAgzt5NvjnO0wCldrY2dhw2yPsCBCJ/1ZkqClE:ZwqcztK7z2dhw1PsIq

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Targets

    • Target

      ab3f8033fc78e7618a61832e441cef5133e6ffd88ec743a296ba37a6aa4b45cd

    • Size

      285KB

    • MD5

      7766e948395f47f942c37081733abe70

    • SHA1

      4594f328e42698f224c7d9a1697e2b77b2b65426

    • SHA256

      ab3f8033fc78e7618a61832e441cef5133e6ffd88ec743a296ba37a6aa4b45cd

    • SHA512

      848ef6376dfdaf25776350a0b7433c453b27b11c43c7589dd8870bb2a93bc59c1dcdf14de7cccad9f0ac07b350a07115c97df3e5105fe6673dcb9dadd34b6623

    • SSDEEP

      3072:1zwqz9qAgzt5NvjnO0wCldrY2dhw2yPsCBCJ/1ZkqClE:ZwqcztK7z2dhw1PsIq

    Score
    10/10
    smokeloaderbackdoortrojan

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks