Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

dridex

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1e715d06cd9ece98291cddf44f6d5d68b23f42d4118015b7dbcaa55bdd9d57bd

  • Size

    264KB

  • Sample

    230108-qqs1bsha9x

  • MD5

    b3c5d6243ef1d617bb9d6b80de2b51a5

  • SHA1

    76dc85f4141b730a2b65905e9bfca1b4d20350f4

  • SHA256

    1e715d06cd9ece98291cddf44f6d5d68b23f42d4118015b7dbcaa55bdd9d57bd

  • SHA512

    b518aba574f4862333857d11e6c78c43b49492a6edd4bcecb5001163de1a4cdf7163db9faa6936a233cbdb5085401434108277dac823d6294c3de428d31a1b16

  • SSDEEP

    3072:VXhENMvtL7/BW/LV/0q/R5ZXQa1UJVqurtlSE4lpxOdUZNTKXWPr0sd6:R3L7/B2/0q/Cb7tllY3OuN

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Targets

    • Target

      1e715d06cd9ece98291cddf44f6d5d68b23f42d4118015b7dbcaa55bdd9d57bd

    • Size

      264KB

    • MD5

      b3c5d6243ef1d617bb9d6b80de2b51a5

    • SHA1

      76dc85f4141b730a2b65905e9bfca1b4d20350f4

    • SHA256

      1e715d06cd9ece98291cddf44f6d5d68b23f42d4118015b7dbcaa55bdd9d57bd

    • SHA512

      b518aba574f4862333857d11e6c78c43b49492a6edd4bcecb5001163de1a4cdf7163db9faa6936a233cbdb5085401434108277dac823d6294c3de428d31a1b16

    • SSDEEP

      3072:VXhENMvtL7/BW/LV/0q/R5ZXQa1UJVqurtlSE4lpxOdUZNTKXWPr0sd6:R3L7/B2/0q/Cb7tllY3OuN

    Score
    10/10
    smokeloaderbackdoortrojan

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Deletes itself

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks