Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

dridex

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0afbe4901847e5ba59b8c44e2bc4fbbf9f08038ffc07b561227822d821ef7556

  • Size

    350KB

  • Sample

    221203-nwjmqsbd7z

  • MD5

    f54720ec5131589969a2539e9675c3e5

  • SHA1

    e7cdb0d4d3ef6ef873ba865d82bc6acfc8f68245

  • SHA256

    0afbe4901847e5ba59b8c44e2bc4fbbf9f08038ffc07b561227822d821ef7556

  • SHA512

    9bfadc2d57515c5b11909dcd9a5edfbc6899242944a5c8b678a2161b719ba647c7c8eefb790895ab89734f19377e75b0eb0631e782a2d1cbeeae06af0891527f

  • SSDEEP

    3072:RN8w01KAAE9C5JzGHl6pWNhQJrjfzx2dWMGnWNTC6NRMHnlX5+K9StwHYDrwB9:Uw00AAeeaIoaj7sOnMW2RqnnPdYo

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Targets

    • Target

      0afbe4901847e5ba59b8c44e2bc4fbbf9f08038ffc07b561227822d821ef7556

    • Size

      350KB

    • MD5

      f54720ec5131589969a2539e9675c3e5

    • SHA1

      e7cdb0d4d3ef6ef873ba865d82bc6acfc8f68245

    • SHA256

      0afbe4901847e5ba59b8c44e2bc4fbbf9f08038ffc07b561227822d821ef7556

    • SHA512

      9bfadc2d57515c5b11909dcd9a5edfbc6899242944a5c8b678a2161b719ba647c7c8eefb790895ab89734f19377e75b0eb0631e782a2d1cbeeae06af0891527f

    • SSDEEP

      3072:RN8w01KAAE9C5JzGHl6pWNhQJrjfzx2dWMGnWNTC6NRMHnlX5+K9StwHYDrwB9:Uw00AAeeaIoaj7sOnMW2RqnnPdYo

    Score
    10/10
    smokeloaderbackdoortrojan

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Deletes itself

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks