Overview

overview

10

Static

static

1

dridex

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    15c5a8dd841448d96c145d60b0d292cdab780480e966afaac7bde09edc8d05d1

  • Size

    191KB

  • Sample

    230204-ncmkaadb49

  • MD5

    9da1b25f025805f2c63452ab01c5f2f9

  • SHA1

    3c4b6f47efc45a9b72d6958a81ac0a1f0ed83645

  • SHA256

    15c5a8dd841448d96c145d60b0d292cdab780480e966afaac7bde09edc8d05d1

  • SHA512

    7704114e93eb14efb3a6b2f40736ea1220d5f311efe8bbb4989078171106cdff67cb5402bf70ed5ea26b7888b1e5c6e87e4fcaa556e39439886ee0ab82a2f9bd

  • SSDEEP

    3072:9fryK7xh4QLjylMPWBX5mwtDf+Zv2nhnTzPaPdewJqBorPc9hmT6c:9fdL2WPtmk2nh3yPdZeorPaUT6

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Targets

    • Target

      15c5a8dd841448d96c145d60b0d292cdab780480e966afaac7bde09edc8d05d1

    • Size

      191KB

    • MD5

      9da1b25f025805f2c63452ab01c5f2f9

    • SHA1

      3c4b6f47efc45a9b72d6958a81ac0a1f0ed83645

    • SHA256

      15c5a8dd841448d96c145d60b0d292cdab780480e966afaac7bde09edc8d05d1

    • SHA512

      7704114e93eb14efb3a6b2f40736ea1220d5f311efe8bbb4989078171106cdff67cb5402bf70ed5ea26b7888b1e5c6e87e4fcaa556e39439886ee0ab82a2f9bd

    • SSDEEP

      3072:9fryK7xh4QLjylMPWBX5mwtDf+Zv2nhnTzPaPdewJqBorPc9hmT6c:9fdL2WPtmk2nh3yPdZeorPaUT6

    Score
    10/10
    smokeloaderbackdoortrojan

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks