Overview

overview

10

Static

static

dridex

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    ebf6ab4cef65dd63665dc39d5aac7963d70cf1b5980df94e2b5632074ecf93aa

  • Size

    239KB

  • Sample

    230101-zyhn1acf88

  • MD5

    629b70f11e7592bce39d8d7cff6bb875

  • SHA1

    b50756b7752644042f0be26f743b6202e52de9a2

  • SHA256

    ebf6ab4cef65dd63665dc39d5aac7963d70cf1b5980df94e2b5632074ecf93aa

  • SHA512

    442340e6a24b0e4fcbfa07ebdbd66410bf3f633a5b5e6712e59437c840dd76e207f922bd3c3fc429d0d2b1cf0d04f3e2e788c3c77c515ca55c1014fb0ebab18e

  • SSDEEP

    3072:2X5WpWx9LR38Udxh5tQ+FOSqJbUkhaNnWkblM2nvQGW7iSWt:eX9LRdxBBFFsQNvlV4b7i

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Targets

    • Target

      ebf6ab4cef65dd63665dc39d5aac7963d70cf1b5980df94e2b5632074ecf93aa

    • Size

      239KB

    • MD5

      629b70f11e7592bce39d8d7cff6bb875

    • SHA1

      b50756b7752644042f0be26f743b6202e52de9a2

    • SHA256

      ebf6ab4cef65dd63665dc39d5aac7963d70cf1b5980df94e2b5632074ecf93aa

    • SHA512

      442340e6a24b0e4fcbfa07ebdbd66410bf3f633a5b5e6712e59437c840dd76e207f922bd3c3fc429d0d2b1cf0d04f3e2e788c3c77c515ca55c1014fb0ebab18e

    • SSDEEP

      3072:2X5WpWx9LR38Udxh5tQ+FOSqJbUkhaNnWkblM2nvQGW7iSWt:eX9LRdxBBFFsQNvlV4b7i

    Score
    10/10
    smokeloaderbackdoortrojan

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks