Overview

overview

10

Static

static

dridex

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    48cecefef72fe8db0bd9990b8fc521352872891719dc7fc9aba5fd53918de262

  • Size

    299KB

  • Sample

    230201-aaevrsba44

  • MD5

    aa3c1080bee46de1e9dfcd1e75d5b2ea

  • SHA1

    c4a22dd087a49f463677a5b660f3d94e9e9e98f4

  • SHA256

    48cecefef72fe8db0bd9990b8fc521352872891719dc7fc9aba5fd53918de262

  • SHA512

    df53ed1c4a56b6c42bb50e54176a190fe27a93d8999b713b947c59f8d4c765d1e4efc780ea84e59a959122e44156563cd063b516dacb2a3b82cfbbc028a4b105

  • SSDEEP

    3072:mcnBt7LxUCRsAxgfTw6H1DqS08E6kATkT9ugcE8mqPUx6WfQz86MpeP3MMD:Pt7LxUTDc6H/ZkAZc8mqMoITQP8M

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Targets

    • Target

      48cecefef72fe8db0bd9990b8fc521352872891719dc7fc9aba5fd53918de262

    • Size

      299KB

    • MD5

      aa3c1080bee46de1e9dfcd1e75d5b2ea

    • SHA1

      c4a22dd087a49f463677a5b660f3d94e9e9e98f4

    • SHA256

      48cecefef72fe8db0bd9990b8fc521352872891719dc7fc9aba5fd53918de262

    • SHA512

      df53ed1c4a56b6c42bb50e54176a190fe27a93d8999b713b947c59f8d4c765d1e4efc780ea84e59a959122e44156563cd063b516dacb2a3b82cfbbc028a4b105

    • SSDEEP

      3072:mcnBt7LxUCRsAxgfTw6H1DqS08E6kATkT9ugcE8mqPUx6WfQz86MpeP3MMD:Pt7LxUTDc6H/ZkAZc8mqMoITQP8M

    Score
    10/10
    smokeloaderbackdoortrojan

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Blocklisted process makes network request

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks