Overview

overview

10

Static

static

dridex

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a5248e2b5f707e6b7d7b33ebd73fe051715fcf1d05937ca9e38088d473618348

  • Size

    186KB

  • Sample

    221123-mdv3daha8z

  • MD5

    36f21540789e75f5e99c572595b3f731

  • SHA1

    442afdc144ea4194df7dd4086d84ddd72e4d392b

  • SHA256

    a5248e2b5f707e6b7d7b33ebd73fe051715fcf1d05937ca9e38088d473618348

  • SHA512

    b5dee3d12b75d0e62a1630e47d5fcf56fa6cfd530729d04e96998658c3ed865dea440ca77f5f0c4edf587503cc6b5ff8f60f0008526b15f25a154b4eaae67736

  • SSDEEP

    3072:HBk75Cq2KFLh0o4WM365TPGWc040NlUIwGb1HLKTsgrf:+7EULh0xv2bc04kmIFb1H+TVz

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Targets

    • Target

      a5248e2b5f707e6b7d7b33ebd73fe051715fcf1d05937ca9e38088d473618348

    • Size

      186KB

    • MD5

      36f21540789e75f5e99c572595b3f731

    • SHA1

      442afdc144ea4194df7dd4086d84ddd72e4d392b

    • SHA256

      a5248e2b5f707e6b7d7b33ebd73fe051715fcf1d05937ca9e38088d473618348

    • SHA512

      b5dee3d12b75d0e62a1630e47d5fcf56fa6cfd530729d04e96998658c3ed865dea440ca77f5f0c4edf587503cc6b5ff8f60f0008526b15f25a154b4eaae67736

    • SSDEEP

      3072:HBk75Cq2KFLh0o4WM365TPGWc040NlUIwGb1HLKTsgrf:+7EULh0xv2bc04kmIFb1H+TVz

    Score
    10/10
    smokeloaderbackdoortrojan

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Deletes itself

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks