Overview

overview

10

Static

static

dridex

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c242969d68b39199fa21ec075493f62f0cc69384f4847759f904031cf217a603

  • Size

    285KB

  • Sample

    230113-nzg83sgf65

  • MD5

    0a713b9646c73a9e82d26b0a4638ff4a

  • SHA1

    557746482cad4605d6a36ef9e0838a1351f1870b

  • SHA256

    c242969d68b39199fa21ec075493f62f0cc69384f4847759f904031cf217a603

  • SHA512

    930dcd4f3349767f87b5b9b8c82ca71afd04a1bd85058129ee3442f80c92d9e7b5949c1c72ac91903184fb32b800ab4b775177a2a75f93bfc97c17036e5f2894

  • SSDEEP

    6144:Bdtj9HlyLmGBlJyWwyuxMi2gHH+8SlJZ9tzrSA3Hq+v:/tj9U6GBqWNxuehZ9P3H

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Targets

    • Target

      c242969d68b39199fa21ec075493f62f0cc69384f4847759f904031cf217a603

    • Size

      285KB

    • MD5

      0a713b9646c73a9e82d26b0a4638ff4a

    • SHA1

      557746482cad4605d6a36ef9e0838a1351f1870b

    • SHA256

      c242969d68b39199fa21ec075493f62f0cc69384f4847759f904031cf217a603

    • SHA512

      930dcd4f3349767f87b5b9b8c82ca71afd04a1bd85058129ee3442f80c92d9e7b5949c1c72ac91903184fb32b800ab4b775177a2a75f93bfc97c17036e5f2894

    • SSDEEP

      6144:Bdtj9HlyLmGBlJyWwyuxMi2gHH+8SlJZ9tzrSA3Hq+v:/tj9U6GBqWNxuehZ9P3H

    Score
    10/10
    smokeloaderbackdoortrojan

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Blocklisted process makes network request

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks