Overview

overview

10

Static

static

dridex

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2a67df798dc727302d4b4b0211b83aae609b05a890aca112a7d304bf07a1214b

  • Size

    181KB

  • Sample

    221107-mlmqzaeccj

  • MD5

    3954861c1f3278db116e150adf1ef0ca

  • SHA1

    9eeea6cf28ff92ed4f6d3026b8063809781dc1f6

  • SHA256

    2a67df798dc727302d4b4b0211b83aae609b05a890aca112a7d304bf07a1214b

  • SHA512

    4484f00504ede61109a4f5aa5730c4e2793df49160ed366488dd05a140d6b2324d87a7e70fc7b0f40bcf8acdb9b9931b627abcaa37eb1814ffcc27fc7783ce68

  • SSDEEP

    3072:6oxj832drfXPLFbKqL5p54c6yZ0x+ogz3itU5mSvFBxaz/Z:6o8GdrvPLRKYzc5631RbO/

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Targets

    • Target

      2a67df798dc727302d4b4b0211b83aae609b05a890aca112a7d304bf07a1214b

    • Size

      181KB

    • MD5

      3954861c1f3278db116e150adf1ef0ca

    • SHA1

      9eeea6cf28ff92ed4f6d3026b8063809781dc1f6

    • SHA256

      2a67df798dc727302d4b4b0211b83aae609b05a890aca112a7d304bf07a1214b

    • SHA512

      4484f00504ede61109a4f5aa5730c4e2793df49160ed366488dd05a140d6b2324d87a7e70fc7b0f40bcf8acdb9b9931b627abcaa37eb1814ffcc27fc7783ce68

    • SSDEEP

      3072:6oxj832drfXPLFbKqL5p54c6yZ0x+ogz3itU5mSvFBxaz/Z:6o8GdrvPLRKYzc5631RbO/

    Score
    10/10
    smokeloaderbackdoortrojan

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Deletes itself

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks