Overview

overview

10

Static

static

1

dridex

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    45d53dee3a734f041fba327ceee5ab33b988c0e928a6077805b2ccdb3d96d330

  • Size

    192KB

  • Sample

    230205-exgp4abe2t

  • MD5

    74d310a4f47f0ad27d649b3bf1656284

  • SHA1

    ed473b2906375c7eece6106622438d2b11a64a40

  • SHA256

    45d53dee3a734f041fba327ceee5ab33b988c0e928a6077805b2ccdb3d96d330

  • SHA512

    67bfc178487c1a8c45db32d67337bd5b36c5bfe759eabb9f12ceab3e31ad8fb2789dc16a0005d38e622e63334ff5119a6b920b05ff3e7e85d698b2fedc397fd7

  • SSDEEP

    3072:LtvOiAV7vV5MsHLiCqW245HaPfvWHy/XcgmO+4e88rodaZ+0yN:Ltv+t5tHLHqD3vW+sgmDUZw+rN

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Targets

    • Target

      45d53dee3a734f041fba327ceee5ab33b988c0e928a6077805b2ccdb3d96d330

    • Size

      192KB

    • MD5

      74d310a4f47f0ad27d649b3bf1656284

    • SHA1

      ed473b2906375c7eece6106622438d2b11a64a40

    • SHA256

      45d53dee3a734f041fba327ceee5ab33b988c0e928a6077805b2ccdb3d96d330

    • SHA512

      67bfc178487c1a8c45db32d67337bd5b36c5bfe759eabb9f12ceab3e31ad8fb2789dc16a0005d38e622e63334ff5119a6b920b05ff3e7e85d698b2fedc397fd7

    • SSDEEP

      3072:LtvOiAV7vV5MsHLiCqW245HaPfvWHy/XcgmO+4e88rodaZ+0yN:Ltv+t5tHLHqD3vW+sgmDUZw+rN

    Score
    10/10
    smokeloaderbackdoortrojan

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Executes dropped EXE

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks