Overview

overview

10

Static

static

dridex

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c5072261b7b27698e90066a45e204fc5db137427d22133d6a34dfbce68a26e13

  • Size

    219KB

  • Sample

    221221-j268rsbh58

  • MD5

    e0508e5987a2d4062288edea3e728d37

  • SHA1

    b5b8fd66e6b915906b1bfa372e1e9a3ea4413d2f

  • SHA256

    c5072261b7b27698e90066a45e204fc5db137427d22133d6a34dfbce68a26e13

  • SHA512

    eebc1a1815715db08099fce922088924f47fe86a2ea905bfc9636b7adabed0decb4117fb7fcd3f1c5ea495a7f38e29d4a62b42bb089dc1a50987b56d357a12ac

  • SSDEEP

    3072:OhOluS4LWS156DDPwWplHCabZt2Mi7zxfROL1T9knTVOWzgKr/so:x+LWLDsWplHd/mz6BT9kxOWzz/

Score
10/10
danabotsmokeloaderbackdoorbankertrojan

Malware Config

Targets

    • Target

      c5072261b7b27698e90066a45e204fc5db137427d22133d6a34dfbce68a26e13

    • Size

      219KB

    • MD5

      e0508e5987a2d4062288edea3e728d37

    • SHA1

      b5b8fd66e6b915906b1bfa372e1e9a3ea4413d2f

    • SHA256

      c5072261b7b27698e90066a45e204fc5db137427d22133d6a34dfbce68a26e13

    • SHA512

      eebc1a1815715db08099fce922088924f47fe86a2ea905bfc9636b7adabed0decb4117fb7fcd3f1c5ea495a7f38e29d4a62b42bb089dc1a50987b56d357a12ac

    • SSDEEP

      3072:OhOluS4LWS156DDPwWplHCabZt2Mi7zxfROL1T9knTVOWzgKr/so:x+LWLDsWplHd/mz6BT9kxOWzz/

    Score
    10/10
    danabotsmokeloaderbackdoorbankertrojan

    • Danabot

      Danabot is a modular banking Trojan that has been linked with other malware.

      trojanbankerdanabot

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Blocklisted process makes network request

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

System Information Discovery

3
T1082

Query Registry

2
T1012

Peripheral Device Discovery

1
T1120

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks