Overview

overview

10

Static

static

dridex

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a9fdc41d74cb278ac51f6d11390825c4fac65418886aa3e3f1db07ff661978a9

  • Size

    178KB

  • Sample

    221125-2t43jsfh3v

  • MD5

    e425bafb24a88a228a2cba643349e180

  • SHA1

    9578119b636925d0ff2e35ebe1c7c48e9771fee6

  • SHA256

    a9fdc41d74cb278ac51f6d11390825c4fac65418886aa3e3f1db07ff661978a9

  • SHA512

    ed202789bf98f106b35e9681bd2d625ada0eb5792fbe8b5b62e3cee29eebb63b42d61a97bad9ca321c86d36269ee23480acd62a6e9413e958a4272b35ce0b133

  • SSDEEP

    3072:1wP5AeI1+Obvd5SHLcC9JppNCstpqGf2q1EejN42:dr1+ObOzDDzTdh

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Targets

    • Target

      a9fdc41d74cb278ac51f6d11390825c4fac65418886aa3e3f1db07ff661978a9

    • Size

      178KB

    • MD5

      e425bafb24a88a228a2cba643349e180

    • SHA1

      9578119b636925d0ff2e35ebe1c7c48e9771fee6

    • SHA256

      a9fdc41d74cb278ac51f6d11390825c4fac65418886aa3e3f1db07ff661978a9

    • SHA512

      ed202789bf98f106b35e9681bd2d625ada0eb5792fbe8b5b62e3cee29eebb63b42d61a97bad9ca321c86d36269ee23480acd62a6e9413e958a4272b35ce0b133

    • SSDEEP

      3072:1wP5AeI1+Obvd5SHLcC9JppNCstpqGf2q1EejN42:dr1+ObOzDDzTdh

    Score
    10/10
    smokeloaderbackdoortrojan

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Deletes itself

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks