Overview

overview

10

Static

static

dridex

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    9d1cbcbf64e62eebe6b2641cc8c42f31d80e7de3866eefd12ce9fa8cb752abb5

  • Size

    229KB

  • Sample

    221226-ykbsvsdf84

  • MD5

    ef4ad7ec623448dcaae0466cc664c589

  • SHA1

    a62ee44242ed49ac8fb0d3fdbd670f0151bbb864

  • SHA256

    9d1cbcbf64e62eebe6b2641cc8c42f31d80e7de3866eefd12ce9fa8cb752abb5

  • SHA512

    ac4d5439ca005c43577acf6221d689959698ff92ff0eca62ffab15d18615bc881c7119fc619c7ebc890e634a6cb5efc44271d9a2a40107da9900d11c1cebde31

  • SSDEEP

    3072:iOhz0Leqm45g8pOrea+7RK3IbQgpjLptYYi/yPT+V+Y700:wLT68pkea+7MYDVH0/yL+Vl7l

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Targets

    • Target

      9d1cbcbf64e62eebe6b2641cc8c42f31d80e7de3866eefd12ce9fa8cb752abb5

    • Size

      229KB

    • MD5

      ef4ad7ec623448dcaae0466cc664c589

    • SHA1

      a62ee44242ed49ac8fb0d3fdbd670f0151bbb864

    • SHA256

      9d1cbcbf64e62eebe6b2641cc8c42f31d80e7de3866eefd12ce9fa8cb752abb5

    • SHA512

      ac4d5439ca005c43577acf6221d689959698ff92ff0eca62ffab15d18615bc881c7119fc619c7ebc890e634a6cb5efc44271d9a2a40107da9900d11c1cebde31

    • SSDEEP

      3072:iOhz0Leqm45g8pOrea+7RK3IbQgpjLptYYi/yPT+V+Y700:wLT68pkea+7MYDVH0/yL+Vl7l

    Score
    10/10
    smokeloaderbackdoortrojan

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Blocklisted process makes network request

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks