Overview

overview

10

Static

static

1

dridex

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    f565d615b25468a0f4a9b204d0c41c7bc5e9157eedc7e5cf2d6f6968334df7fd

  • Size

    320KB

  • Sample

    230208-skgq8aca75

  • MD5

    318067cb2f5fc39fc41ce77554632671

  • SHA1

    66d7782f75d0fe8747102a1f5484c81727ed8bb9

  • SHA256

    f565d615b25468a0f4a9b204d0c41c7bc5e9157eedc7e5cf2d6f6968334df7fd

  • SHA512

    fd1cb55b0b29165770ba8d9a45b7db948983fba17ab3ab738c998e27b1b50ce1c07388d499439ca50f8d392c0ec06ef509e86801deb378751d665d7c0319350d

  • SSDEEP

    3072:hPFHDIKRNCupJbKlKKu1KshBv085K7EAQRLStKRxhUwLI:hNj9HpJbKAKukEtWEHgtKBLI

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Targets

    • Target

      f565d615b25468a0f4a9b204d0c41c7bc5e9157eedc7e5cf2d6f6968334df7fd

    • Size

      320KB

    • MD5

      318067cb2f5fc39fc41ce77554632671

    • SHA1

      66d7782f75d0fe8747102a1f5484c81727ed8bb9

    • SHA256

      f565d615b25468a0f4a9b204d0c41c7bc5e9157eedc7e5cf2d6f6968334df7fd

    • SHA512

      fd1cb55b0b29165770ba8d9a45b7db948983fba17ab3ab738c998e27b1b50ce1c07388d499439ca50f8d392c0ec06ef509e86801deb378751d665d7c0319350d

    • SSDEEP

      3072:hPFHDIKRNCupJbKlKKu1KshBv085K7EAQRLStKRxhUwLI:hNj9HpJbKAKukEtWEHgtKBLI

    Score
    10/10
    smokeloaderbackdoortrojan

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks