Overview

overview

10

Static

static

dridex

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    c50ec118612c5bc84eb9a9e85e5d770a29e4bd08e2847e8b31bc8c5f502ac0a9

  • Size

    348KB

  • Sample

    221202-yv7chsdf9z

  • MD5

    5cd7bf397ba84b2d636d919d23794f2e

  • SHA1

    068b3526bd9cad056c6cba06fea83a8db4ccec28

  • SHA256

    c50ec118612c5bc84eb9a9e85e5d770a29e4bd08e2847e8b31bc8c5f502ac0a9

  • SHA512

    7b6146a66b756e8749edda19dd80c005387668221709c2d31ce53546c9ebbd11205c20fdcae7a9240ba9e15854e0ace02ee04d71221e00da4b4521c6e461454b

  • SSDEEP

    6144:jKSIOGLssGdIGRPaLQbOTNhSn/9THEQqnuRjMgUL:jD3GydIrLzbS/9jEfuRQg

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Targets

    • Target

      c50ec118612c5bc84eb9a9e85e5d770a29e4bd08e2847e8b31bc8c5f502ac0a9

    • Size

      348KB

    • MD5

      5cd7bf397ba84b2d636d919d23794f2e

    • SHA1

      068b3526bd9cad056c6cba06fea83a8db4ccec28

    • SHA256

      c50ec118612c5bc84eb9a9e85e5d770a29e4bd08e2847e8b31bc8c5f502ac0a9

    • SHA512

      7b6146a66b756e8749edda19dd80c005387668221709c2d31ce53546c9ebbd11205c20fdcae7a9240ba9e15854e0ace02ee04d71221e00da4b4521c6e461454b

    • SSDEEP

      6144:jKSIOGLssGdIGRPaLQbOTNhSn/9THEQqnuRjMgUL:jD3GydIrLzbS/9jEfuRQg

    Score
    10/10
    smokeloaderbackdoortrojan

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Executes dropped EXE

    • Deletes itself

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks