Overview

overview

10

Static

static

dridex

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    08ebd3e74886a63b7dcbb4d49c2027555f8b2ff5426c11a124e2b5468511f27a

  • Size

    275KB

  • Sample

    221206-ctgvksgg67

  • MD5

    48e71a07fd0e8221251dd03727b3e558

  • SHA1

    481a47ab47e580d23ead21a8c2d64f17dd92858a

  • SHA256

    08ebd3e74886a63b7dcbb4d49c2027555f8b2ff5426c11a124e2b5468511f27a

  • SHA512

    6ff63ce00cd8d6323aed72dcb581134585151d6563f47caf30bf75297c667d1261d7a6c625de97d2f75593f91ac21a567c8c1238eda1965066fef6a629569b64

  • SSDEEP

    3072:veXVWYoYIShe3dwf3xpWR5zjXZw0YWe0eDt+a/XiVPTsiVRvJTcpLkDAgYgV2qsf:vm1hBf3xKjXZAWe0eDt+YkTsIDcBCVS

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Targets

    • Target

      08ebd3e74886a63b7dcbb4d49c2027555f8b2ff5426c11a124e2b5468511f27a

    • Size

      275KB

    • MD5

      48e71a07fd0e8221251dd03727b3e558

    • SHA1

      481a47ab47e580d23ead21a8c2d64f17dd92858a

    • SHA256

      08ebd3e74886a63b7dcbb4d49c2027555f8b2ff5426c11a124e2b5468511f27a

    • SHA512

      6ff63ce00cd8d6323aed72dcb581134585151d6563f47caf30bf75297c667d1261d7a6c625de97d2f75593f91ac21a567c8c1238eda1965066fef6a629569b64

    • SSDEEP

      3072:veXVWYoYIShe3dwf3xpWR5zjXZw0YWe0eDt+a/XiVPTsiVRvJTcpLkDAgYgV2qsf:vm1hBf3xKjXZAWe0eDt+YkTsIDcBCVS

    Score
    10/10
    smokeloaderbackdoortrojan

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks