Overview

overview

10

Static

static

1

dridex

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    4dcec47250a12f37d58e0b95456bed60b5e0419c4d181bb0ff86ce61d3b8a2c1

  • Size

    195KB

  • Sample

    230209-mx6yzsha3y

  • MD5

    6af70286cef6776be61097b267110487

  • SHA1

    a4386ceade769b06d30d378bd289933d6226fb27

  • SHA256

    4dcec47250a12f37d58e0b95456bed60b5e0419c4d181bb0ff86ce61d3b8a2c1

  • SHA512

    297b1dbfe96973a4d6fb6dc907bc42c62e70c9001da708d5381bd73cb9d73bc012bccb1b768167144a7cfdcbcd0b6f51b54cde8529a9bff6db7ad2f030d4fb18

  • SSDEEP

    3072:CtWOCk3QXH7FJR7LCuuWDeh5O4ThCje0tgazrwuSwP22HAitvLKYknmpI:CtWbh37L/uiP4TkC0tgazMuL22zGYkZ

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Targets

    • Target

      4dcec47250a12f37d58e0b95456bed60b5e0419c4d181bb0ff86ce61d3b8a2c1

    • Size

      195KB

    • MD5

      6af70286cef6776be61097b267110487

    • SHA1

      a4386ceade769b06d30d378bd289933d6226fb27

    • SHA256

      4dcec47250a12f37d58e0b95456bed60b5e0419c4d181bb0ff86ce61d3b8a2c1

    • SHA512

      297b1dbfe96973a4d6fb6dc907bc42c62e70c9001da708d5381bd73cb9d73bc012bccb1b768167144a7cfdcbcd0b6f51b54cde8529a9bff6db7ad2f030d4fb18

    • SSDEEP

      3072:CtWOCk3QXH7FJR7LCuuWDeh5O4ThCje0tgazrwuSwP22HAitvLKYknmpI:CtWbh37L/uiP4TkC0tgazMuL22zGYkZ

    Score
    10/10
    smokeloaderbackdoortrojan

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Deletes itself

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks