Overview

overview

10

Static

static

dridex

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    6f0a1265c87415ff03070b88a5fb3f9ae9bc5c85700d4ac73d3c67211585eb92

  • Size

    215KB

  • Sample

    230102-krdn5sgh7z

  • MD5

    28426ab78c08aa0cfdc9408547e58962

  • SHA1

    2a54394101aad854ff3d6f076b4ad4ff71bc1e2a

  • SHA256

    6f0a1265c87415ff03070b88a5fb3f9ae9bc5c85700d4ac73d3c67211585eb92

  • SHA512

    fa085533c73f6023eaadf7ff6a87b86eb64fe8f6804d50da4370464d1f6c367cba9e5ca60b9a97e244fda10b20ad9cc2e4c9ab9eb0543dfd5314db17cd5fc524

  • SSDEEP

    3072:OX5MGLcL9C8ZbiK5O52ZWdcv1GCxOYXJIdBTwuW6:WFILbusl7xOYa5

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Targets

    • Target

      6f0a1265c87415ff03070b88a5fb3f9ae9bc5c85700d4ac73d3c67211585eb92

    • Size

      215KB

    • MD5

      28426ab78c08aa0cfdc9408547e58962

    • SHA1

      2a54394101aad854ff3d6f076b4ad4ff71bc1e2a

    • SHA256

      6f0a1265c87415ff03070b88a5fb3f9ae9bc5c85700d4ac73d3c67211585eb92

    • SHA512

      fa085533c73f6023eaadf7ff6a87b86eb64fe8f6804d50da4370464d1f6c367cba9e5ca60b9a97e244fda10b20ad9cc2e4c9ab9eb0543dfd5314db17cd5fc524

    • SSDEEP

      3072:OX5MGLcL9C8ZbiK5O52ZWdcv1GCxOYXJIdBTwuW6:WFILbusl7xOYa5

    Score
    10/10
    smokeloaderbackdoortrojan

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks