Overview

overview

10

Static

static

dridex

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    84db62dd17380f7fe98fca386304e6d4a999eb777ec8cb9eb48a9d153ff96603

  • Size

    214KB

  • Sample

    230105-qvy25scb46

  • MD5

    9306a2b60641cd61af22ec5e8ef751f6

  • SHA1

    9d0a190a5b2660f86f1d2efa9a42c65fe23f3d46

  • SHA256

    84db62dd17380f7fe98fca386304e6d4a999eb777ec8cb9eb48a9d153ff96603

  • SHA512

    b2da1d2b608ec57a4364d8bd2576835d9c7e21d825e657c42271384ff57046658a300a4bb5bd506f588d95e66faf68e921b4ba927adc36e831acb32def5fb12c

  • SSDEEP

    3072:aX2C217HiL88RZIt+j52YeS64jCvx7TkhfVXMIzSYwNFBfH8KDmcTd1ZWl:6zL8GIt+kBSleqZKMGNFB/8KH3Z

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Targets

    • Target

      84db62dd17380f7fe98fca386304e6d4a999eb777ec8cb9eb48a9d153ff96603

    • Size

      214KB

    • MD5

      9306a2b60641cd61af22ec5e8ef751f6

    • SHA1

      9d0a190a5b2660f86f1d2efa9a42c65fe23f3d46

    • SHA256

      84db62dd17380f7fe98fca386304e6d4a999eb777ec8cb9eb48a9d153ff96603

    • SHA512

      b2da1d2b608ec57a4364d8bd2576835d9c7e21d825e657c42271384ff57046658a300a4bb5bd506f588d95e66faf68e921b4ba927adc36e831acb32def5fb12c

    • SSDEEP

      3072:aX2C217HiL88RZIt+j52YeS64jCvx7TkhfVXMIzSYwNFBfH8KDmcTd1ZWl:6zL8GIt+kBSleqZKMGNFB/8KH3Z

    Score
    10/10
    smokeloaderbackdoortrojan

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Blocklisted process makes network request

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks