Overview

overview

10

Static

static

dridex

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    511f7983ead2334b3562fd369edbb4327ba27d036b943cacb9a851b3691086f7

  • Size

    267KB

  • Sample

    230111-ejryxaeb9w

  • MD5

    ab098b39e4bbdc9a67a9e9970e541569

  • SHA1

    b042201d429832d7d5fb3802dc884e3c73de7c64

  • SHA256

    511f7983ead2334b3562fd369edbb4327ba27d036b943cacb9a851b3691086f7

  • SHA512

    d295196bf46fc84b0a3f4efd8cbc5d6774fd2294112a86c64f70912e350ee54a73a4c2f70f82ffb95031c447a36d7019927bbe3ddb4ebfefc98d09d744482257

  • SSDEEP

    3072:cXEgHL/7MHFLaEmrMT25MDAHMayQtgE/NI/7FgzputirbAaBNCanng0Pb:Yh0HFLFTTDAsQHu7F8QGNng6

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Targets

    • Target

      511f7983ead2334b3562fd369edbb4327ba27d036b943cacb9a851b3691086f7

    • Size

      267KB

    • MD5

      ab098b39e4bbdc9a67a9e9970e541569

    • SHA1

      b042201d429832d7d5fb3802dc884e3c73de7c64

    • SHA256

      511f7983ead2334b3562fd369edbb4327ba27d036b943cacb9a851b3691086f7

    • SHA512

      d295196bf46fc84b0a3f4efd8cbc5d6774fd2294112a86c64f70912e350ee54a73a4c2f70f82ffb95031c447a36d7019927bbe3ddb4ebfefc98d09d744482257

    • SSDEEP

      3072:cXEgHL/7MHFLaEmrMT25MDAHMayQtgE/NI/7FgzputirbAaBNCanng0Pb:Yh0HFLFTTDAsQHu7F8QGNng6

    Score
    10/10
    smokeloaderbackdoortrojan

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Executes dropped EXE

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks