Overview

overview

10

Static

static

dridex

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    e783fa9cf281cea15fef6dc41c0d28cbf9d5b0705a09e33b2a62a1b551113459

  • Size

    239KB

  • Sample

    230102-a5tmeagc9t

  • MD5

    482a997f6beb5e62f1ddd44b18be5034

  • SHA1

    966662f67102cb40f5b154f0ec630e61cd68ac3b

  • SHA256

    e783fa9cf281cea15fef6dc41c0d28cbf9d5b0705a09e33b2a62a1b551113459

  • SHA512

    44aa22ac231d54b97e33b4affa71b2391a4c433b0cdd9eb0a51fb320358fe581f19bbe64d221105acb9a20465dd72d9819cdcabd561c25b299c0d8dd018a9e54

  • SSDEEP

    3072:XX5iapLI2MCA/52Ezqt4AXgwTQXg+d78+kSpWTh6WkQUq9xM2nvQGW7iSWO:HvLPACqAXgwTQTkXThPUqzV4b7i

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Targets

    • Target

      e783fa9cf281cea15fef6dc41c0d28cbf9d5b0705a09e33b2a62a1b551113459

    • Size

      239KB

    • MD5

      482a997f6beb5e62f1ddd44b18be5034

    • SHA1

      966662f67102cb40f5b154f0ec630e61cd68ac3b

    • SHA256

      e783fa9cf281cea15fef6dc41c0d28cbf9d5b0705a09e33b2a62a1b551113459

    • SHA512

      44aa22ac231d54b97e33b4affa71b2391a4c433b0cdd9eb0a51fb320358fe581f19bbe64d221105acb9a20465dd72d9819cdcabd561c25b299c0d8dd018a9e54

    • SSDEEP

      3072:XX5iapLI2MCA/52Ezqt4AXgwTQXg+d78+kSpWTh6WkQUq9xM2nvQGW7iSWO:HvLPACqAXgwTQTkXThPUqzV4b7i

    Score
    10/10
    smokeloaderbackdoortrojan

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Executes dropped EXE

    • Deletes itself

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks