Overview

overview

10

Static

static

dridex

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8b4e8c2d8b4e9876d6e4dcea91200191b45e9240dc630dca1501263c206811d5

  • Size

    297KB

  • Sample

    230131-wdr56ahd83

  • MD5

    c6f4d7972d271013dd2588644330d0bf

  • SHA1

    e8d1cd3b32942f269d931ab54549cdacc20169af

  • SHA256

    8b4e8c2d8b4e9876d6e4dcea91200191b45e9240dc630dca1501263c206811d5

  • SHA512

    856d91cc688c6e85b3fa4a508bd87ee5827b816d3accebc5e0bc280aa6ce02a402d92239e1cda9b8c36d4019dfb4db4de6f4debae8843da496bf9e3a80969641

  • SSDEEP

    3072:E5ubJmLBdRAfCJ0O65BoibDMuNn6Os0vk6gVx/atmqPUx6WfQz86vE3MMo:dbJmLB0fIdkBgDytmqMoIWE8M

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Targets

    • Target

      8b4e8c2d8b4e9876d6e4dcea91200191b45e9240dc630dca1501263c206811d5

    • Size

      297KB

    • MD5

      c6f4d7972d271013dd2588644330d0bf

    • SHA1

      e8d1cd3b32942f269d931ab54549cdacc20169af

    • SHA256

      8b4e8c2d8b4e9876d6e4dcea91200191b45e9240dc630dca1501263c206811d5

    • SHA512

      856d91cc688c6e85b3fa4a508bd87ee5827b816d3accebc5e0bc280aa6ce02a402d92239e1cda9b8c36d4019dfb4db4de6f4debae8843da496bf9e3a80969641

    • SSDEEP

      3072:E5ubJmLBdRAfCJ0O65BoibDMuNn6Os0vk6gVx/atmqPUx6WfQz86vE3MMo:dbJmLB0fIdkBgDytmqMoIWE8M

    Score
    10/10
    smokeloaderbackdoortrojan

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Executes dropped EXE

    • Deletes itself

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks