Overview

overview

10

Static

static

dridex

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    36e16404b4628cdb3a8d30df5f385f299c5a4be4bec60066fe889ef8000a2acb

  • Size

    310KB

  • Sample

    221106-3a688shggq

  • MD5

    82aab4c6a04263b337fe262db379195b

  • SHA1

    08e72738c3dec641df40995700801bb8e0354490

  • SHA256

    36e16404b4628cdb3a8d30df5f385f299c5a4be4bec60066fe889ef8000a2acb

  • SHA512

    6773de0b35efbadf7400ec0c12896a1df0271dd390aa5df550a15d598c0419877f7a31ac9df3e51c4a17923a2fff318f8bb87832ed10563c45ed450e8a9b1f5a

  • SSDEEP

    3072:ljH4nokPto57a2NMDS68BCKX9JDZZmxR9Zf4YLenAxk1B8E4:54n5anNMDKP9JrmrYAWr54

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Targets

    • Target

      36e16404b4628cdb3a8d30df5f385f299c5a4be4bec60066fe889ef8000a2acb

    • Size

      310KB

    • MD5

      82aab4c6a04263b337fe262db379195b

    • SHA1

      08e72738c3dec641df40995700801bb8e0354490

    • SHA256

      36e16404b4628cdb3a8d30df5f385f299c5a4be4bec60066fe889ef8000a2acb

    • SHA512

      6773de0b35efbadf7400ec0c12896a1df0271dd390aa5df550a15d598c0419877f7a31ac9df3e51c4a17923a2fff318f8bb87832ed10563c45ed450e8a9b1f5a

    • SSDEEP

      3072:ljH4nokPto57a2NMDS68BCKX9JDZZmxR9Zf4YLenAxk1B8E4:54n5anNMDKP9JrmrYAWr54

    Score
    10/10
    smokeloaderbackdoortrojan

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Deletes itself

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks