Overview

overview

10

Static

static

dridex

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    4ec3a319cad3d784a83fb3fb42fe1b18669201c75c45c02d9021e661a3a2f96b

  • Size

    159KB

  • Sample

    221123-wr59yacg78

  • MD5

    030f925a3406f704b24cd97c5e3bb943

  • SHA1

    835a13eb1dc87183b4254be978a381c7b432b430

  • SHA256

    4ec3a319cad3d784a83fb3fb42fe1b18669201c75c45c02d9021e661a3a2f96b

  • SHA512

    586bf0a9726854bf0e41e973a9391951abb5694c56c1227fdc59145c1fe9c9ba902e83f88daf9874d1c3e2d450db622c1bc1bac85a1c5150162a01b8986f9149

  • SSDEEP

    3072:9HAD81llOzI7LiLSnUzS5LZESJ7FffacuOyNbqfn8Rxq5RrL:KDdzI7mLSn3ESb1f8eB

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Targets

    • Target

      4ec3a319cad3d784a83fb3fb42fe1b18669201c75c45c02d9021e661a3a2f96b

    • Size

      159KB

    • MD5

      030f925a3406f704b24cd97c5e3bb943

    • SHA1

      835a13eb1dc87183b4254be978a381c7b432b430

    • SHA256

      4ec3a319cad3d784a83fb3fb42fe1b18669201c75c45c02d9021e661a3a2f96b

    • SHA512

      586bf0a9726854bf0e41e973a9391951abb5694c56c1227fdc59145c1fe9c9ba902e83f88daf9874d1c3e2d450db622c1bc1bac85a1c5150162a01b8986f9149

    • SSDEEP

      3072:9HAD81llOzI7LiLSnUzS5LZESJ7FffacuOyNbqfn8Rxq5RrL:KDdzI7mLSn3ESb1f8eB

    Score
    10/10
    smokeloaderbackdoortrojan

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Blocklisted process makes network request

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks