Overview

overview

10

Static

static

1

dridex

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    ff50b3a7ac46e63a74d5cb4a9a425695ac45ba4759858f42472a727e9b388c77

  • Size

    386KB

  • Sample

    230211-ehrazsbd5x

  • MD5

    f9361429de0c485fbc0dd752594b9c8f

  • SHA1

    612a355dfd9e6c693a20c452553bdb1e31e5418a

  • SHA256

    ff50b3a7ac46e63a74d5cb4a9a425695ac45ba4759858f42472a727e9b388c77

  • SHA512

    44752785d6cdad8a0fdbfb032275fa7d2b5426e2d083b73c6e308edb978bd4bb1de9a4065980a0fc2db4cf5bf5255f82ea6c685038e28a86f39a278d97040b41

  • SSDEEP

    6144:qldXHpC3g5HfjQtdkGbATZeSMdkTDWZt5C:qHJeg5Lkk68sSMdk

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Targets

    • Target

      ff50b3a7ac46e63a74d5cb4a9a425695ac45ba4759858f42472a727e9b388c77

    • Size

      386KB

    • MD5

      f9361429de0c485fbc0dd752594b9c8f

    • SHA1

      612a355dfd9e6c693a20c452553bdb1e31e5418a

    • SHA256

      ff50b3a7ac46e63a74d5cb4a9a425695ac45ba4759858f42472a727e9b388c77

    • SHA512

      44752785d6cdad8a0fdbfb032275fa7d2b5426e2d083b73c6e308edb978bd4bb1de9a4065980a0fc2db4cf5bf5255f82ea6c685038e28a86f39a278d97040b41

    • SSDEEP

      6144:qldXHpC3g5HfjQtdkGbATZeSMdkTDWZt5C:qHJeg5Lkk68sSMdk

    Score
    10/10
    smokeloaderbackdoortrojan

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Deletes itself

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks