Overview

overview

10

Static

static

dridex

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    d7cf9e9a1feccee42ca13bbe7255ead0923253d2aba5b762cfa6d76d6dcb7cdc

  • Size

    381KB

  • Sample

    221207-amq4kahb87

  • MD5

    675ffe5e374fd5d72b84fb258d5cb63e

  • SHA1

    9e17fe0ac7a3657406165c8f2b5fd3bd66574e5c

  • SHA256

    d7cf9e9a1feccee42ca13bbe7255ead0923253d2aba5b762cfa6d76d6dcb7cdc

  • SHA512

    02f962803122cf45e5086db44761c20ef7001c94589f80e9cb1693f6feb0c20d54aaeea17a96cd0c359cd9b7799849d1bc39a1c3ca3dc58adaf24929c2964e0b

  • SSDEEP

    6144:1bJULAZ7SGbd9N66Hz2whWVqvWcoBlCB1yEhaVe:1CkZ7SGbdHLqL9cWCB1l3

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Targets

    • Target

      d7cf9e9a1feccee42ca13bbe7255ead0923253d2aba5b762cfa6d76d6dcb7cdc

    • Size

      381KB

    • MD5

      675ffe5e374fd5d72b84fb258d5cb63e

    • SHA1

      9e17fe0ac7a3657406165c8f2b5fd3bd66574e5c

    • SHA256

      d7cf9e9a1feccee42ca13bbe7255ead0923253d2aba5b762cfa6d76d6dcb7cdc

    • SHA512

      02f962803122cf45e5086db44761c20ef7001c94589f80e9cb1693f6feb0c20d54aaeea17a96cd0c359cd9b7799849d1bc39a1c3ca3dc58adaf24929c2964e0b

    • SSDEEP

      6144:1bJULAZ7SGbd9N66Hz2whWVqvWcoBlCB1yEhaVe:1CkZ7SGbdHLqL9cWCB1l3

    Score
    10/10
    smokeloaderbackdoortrojan

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Blocklisted process makes network request

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks