Overview

overview

10

Static

static

dridex

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dec38df77905fd832e299ebebcbb6b214fb592e49a348bcf4c5fb3a6e3b27f62

  • Size

    214KB

  • Sample

    221216-ws2cdaaa5s

  • MD5

    78ff8cf751a6b9a0692a2dcc930b9a4c

  • SHA1

    4579dee5bb43037cfbed0614b7dc841b46b9c41c

  • SHA256

    dec38df77905fd832e299ebebcbb6b214fb592e49a348bcf4c5fb3a6e3b27f62

  • SHA512

    538d92182e1247e43ffa734d3318d3b479191c2a5b3136e999a0d35b0cd123588303c8a9b9759df93057ac05f4dd4da3d93b584306f3183530c2f67105d6ab0e

  • SSDEEP

    3072:5Lpon5LhXvY0RIyi1Umf60fEktyuGoIWHOLszc/yV40zwUzQRKF+:VmLxvjdSMk4mBugzc/yV40M2b

Score
10/10
rhadamanthyssmokeloaderbackdoorstealertrojan

Malware Config

Targets

    • Target

      dec38df77905fd832e299ebebcbb6b214fb592e49a348bcf4c5fb3a6e3b27f62

    • Size

      214KB

    • MD5

      78ff8cf751a6b9a0692a2dcc930b9a4c

    • SHA1

      4579dee5bb43037cfbed0614b7dc841b46b9c41c

    • SHA256

      dec38df77905fd832e299ebebcbb6b214fb592e49a348bcf4c5fb3a6e3b27f62

    • SHA512

      538d92182e1247e43ffa734d3318d3b479191c2a5b3136e999a0d35b0cd123588303c8a9b9759df93057ac05f4dd4da3d93b584306f3183530c2f67105d6ab0e

    • SSDEEP

      3072:5Lpon5LhXvY0RIyi1Umf60fEktyuGoIWHOLszc/yV40zwUzQRKF+:VmLxvjdSMk4mBugzc/yV40M2b

    Score
    10/10
    rhadamanthyssmokeloaderbackdoorstealertrojan

    • Detect rhadamanthys stealer shellcode

    • Detects Smokeloader packer

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

      stealerrhadamanthys

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Suspicious use of NtCreateUserProcessOtherParentProcess

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks