Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

dridex

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0fe9ad9529723aa84e782fc7a9e4ccd1d2c9720eb544c5f196dad52da65916b2

  • Size

    273KB

  • Sample

    221205-tkd6rsed88

  • MD5

    85cbf9277e814e4b950df45e4a245fab

  • SHA1

    d14351d7e63c3f9e2b45c0ba9cd39d94a3ac2635

  • SHA256

    0fe9ad9529723aa84e782fc7a9e4ccd1d2c9720eb544c5f196dad52da65916b2

  • SHA512

    a7ce87fa09ad6f7ba97e3b55381b0d349a7c3fbbcb9c5798fc8f8a39c1dacb1ec624f8113643782476576af1ef869df0d2a2cbc30a5d0d8ddb98dfcc88266c07

  • SSDEEP

    3072:DymXV0t4JYKM05DuYg9Wv56YfsQYT+oGTGBFxxghTDw02rwm91y22ZeXGMh0k:eOhuYghYEQWNGiBDxf02smQe2U

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Targets

    • Target

      0fe9ad9529723aa84e782fc7a9e4ccd1d2c9720eb544c5f196dad52da65916b2

    • Size

      273KB

    • MD5

      85cbf9277e814e4b950df45e4a245fab

    • SHA1

      d14351d7e63c3f9e2b45c0ba9cd39d94a3ac2635

    • SHA256

      0fe9ad9529723aa84e782fc7a9e4ccd1d2c9720eb544c5f196dad52da65916b2

    • SHA512

      a7ce87fa09ad6f7ba97e3b55381b0d349a7c3fbbcb9c5798fc8f8a39c1dacb1ec624f8113643782476576af1ef869df0d2a2cbc30a5d0d8ddb98dfcc88266c07

    • SSDEEP

      3072:DymXV0t4JYKM05DuYg9Wv56YfsQYT+oGTGBFxxghTDw02rwm91y22ZeXGMh0k:eOhuYghYEQWNGiBDxf02smQe2U

    Score
    10/10
    smokeloaderbackdoortrojan

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Blocklisted process makes network request

    • Downloads MZ/PE file

    • Executes dropped EXE

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks