Overview

overview

10

Static

static

dridex

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a2a56847c92e2742c52820dd151144878df54d947725c737e94332857b88c581

  • Size

    214KB

  • Sample

    221220-q8e67ahg43

  • MD5

    9ac92f2a0c65c0ef8577af9f7ce31bf5

  • SHA1

    1a00e61a3b11d82ccfa26fdcc297bcec9c04da46

  • SHA256

    a2a56847c92e2742c52820dd151144878df54d947725c737e94332857b88c581

  • SHA512

    e5594fdd7aae6dec4d92a16fe47e53068427c4af711321f18bca8d9d756544dce9598b010a8435a9074c95efab974f5a41e7d2c48f5debe4913b88eaab22d3dc

  • SSDEEP

    3072:NALLoo7R3C/pSGzGoJTrfOUL7PWz7b/tFdwpKWRNHCDml:aLoxhBTrfOWDWjLdwpKkCa

Score
10/10
smokeloadersystembcbackdoortrojan

Malware Config

Extracted

Family

systembc

C2

109.205.214.18:443

Targets

    • Target

      a2a56847c92e2742c52820dd151144878df54d947725c737e94332857b88c581

    • Size

      214KB

    • MD5

      9ac92f2a0c65c0ef8577af9f7ce31bf5

    • SHA1

      1a00e61a3b11d82ccfa26fdcc297bcec9c04da46

    • SHA256

      a2a56847c92e2742c52820dd151144878df54d947725c737e94332857b88c581

    • SHA512

      e5594fdd7aae6dec4d92a16fe47e53068427c4af711321f18bca8d9d756544dce9598b010a8435a9074c95efab974f5a41e7d2c48f5debe4913b88eaab22d3dc

    • SSDEEP

      3072:NALLoo7R3C/pSGzGoJTrfOUL7PWz7b/tFdwpKWRNHCDml:aLoxhBTrfOWDWjLdwpKkCa

    Score
    10/10
    smokeloadersystembcbackdoortrojan

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • SystemBC

      SystemBC is a proxy and remote administration tool first seen in 2019.

      trojansystembc

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Deletes itself

    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks