Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

dridex

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1785f599349534a2fa4404c78eced25cac3f64f7302a29edfdea1805e3111bd3

  • Size

    377KB

  • Sample

    221206-sle9sahe59

  • MD5

    ead788475cddadd1e3ea61b03b88658e

  • SHA1

    bdc7eb87959adee4c61f4ef1bc7ac2af7c21d6f0

  • SHA256

    1785f599349534a2fa4404c78eced25cac3f64f7302a29edfdea1805e3111bd3

  • SHA512

    e66a98a1ca9ace31d123a138ac7a8bbbdb97603e47cca30fdc20e9dc81e70fce829e35b5cf569b59a5582833d7e63049895ea00d534a6f131307e4dafc680e9c

  • SSDEEP

    6144:u7fA9wLrgh3KuGW5PxYg0pkhPSByiglP0rNPMk:ujAKYpKqFmg0+SyzlP0r

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Targets

    • Target

      1785f599349534a2fa4404c78eced25cac3f64f7302a29edfdea1805e3111bd3

    • Size

      377KB

    • MD5

      ead788475cddadd1e3ea61b03b88658e

    • SHA1

      bdc7eb87959adee4c61f4ef1bc7ac2af7c21d6f0

    • SHA256

      1785f599349534a2fa4404c78eced25cac3f64f7302a29edfdea1805e3111bd3

    • SHA512

      e66a98a1ca9ace31d123a138ac7a8bbbdb97603e47cca30fdc20e9dc81e70fce829e35b5cf569b59a5582833d7e63049895ea00d534a6f131307e4dafc680e9c

    • SSDEEP

      6144:u7fA9wLrgh3KuGW5PxYg0pkhPSByiglP0rNPMk:ujAKYpKqFmg0+SyzlP0r

    Score
    10/10
    smokeloaderbackdoortrojan

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Blocklisted process makes network request

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks