Overview

overview

10

Static

static

dridex

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    80f42054e2faafb7eb6ab7011c9f9cd1952e86626a51eedcf3bf384bdeea302b

  • Size

    215KB

  • Sample

    230102-k2hqvagh9y

  • MD5

    b468c7f2d21206f78badce717bdac84b

  • SHA1

    f2b2a1bf032e6e9e1bf228b5df50e3a54126832a

  • SHA256

    80f42054e2faafb7eb6ab7011c9f9cd1952e86626a51eedcf3bf384bdeea302b

  • SHA512

    49e9154b20ee26009ae49d3dde60d6781d31bd4fdd6afca1568c44ab41998c0a2f90afd4adf997ff53e9fb2a70c4582354fa1633a19b9169dcf1415f33da79f5

  • SSDEEP

    3072:vX8tXxFLsy2oujAjU5voo2e/5BEqV/FAYmEJWUBqwIdJNloBoW6:feHL+jo82eB7VNQOWUopNloB+

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Targets

    • Target

      80f42054e2faafb7eb6ab7011c9f9cd1952e86626a51eedcf3bf384bdeea302b

    • Size

      215KB

    • MD5

      b468c7f2d21206f78badce717bdac84b

    • SHA1

      f2b2a1bf032e6e9e1bf228b5df50e3a54126832a

    • SHA256

      80f42054e2faafb7eb6ab7011c9f9cd1952e86626a51eedcf3bf384bdeea302b

    • SHA512

      49e9154b20ee26009ae49d3dde60d6781d31bd4fdd6afca1568c44ab41998c0a2f90afd4adf997ff53e9fb2a70c4582354fa1633a19b9169dcf1415f33da79f5

    • SSDEEP

      3072:vX8tXxFLsy2oujAjU5voo2e/5BEqV/FAYmEJWUBqwIdJNloBoW6:feHL+jo82eB7VNQOWUopNloB+

    Score
    10/10
    smokeloaderbackdoortrojan

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Deletes itself

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks