Overview

overview

10

Static

static

1

dridex

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    72f587af57194349a60b7f921045886d399a49cbf3bf01c4c584aade0b41a0d4

  • Size

    204KB

  • Sample

    230216-bj8d4sfa75

  • MD5

    00ad7d44fa463cbca7329a3d95c6c293

  • SHA1

    62bcabd3bc327c1e60142a4ea350383df5e39e73

  • SHA256

    72f587af57194349a60b7f921045886d399a49cbf3bf01c4c584aade0b41a0d4

  • SHA512

    f4421d0d49d1ee6fd023c73c014dfcebefbcaf044229210a6542fea5befc180903d809d4c150ea57fa186d1c51884b746c5bce7bdcfe4d5a160e22fb7a51012c

  • SSDEEP

    3072:I6p/Eq2fo4okuysR1dywSji/jNxeCAJObU2lf7rQhXrkm/rUsqQ:IQ/EaNysbUwNr3AJ3gvQmm

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Targets

    • Target

      72f587af57194349a60b7f921045886d399a49cbf3bf01c4c584aade0b41a0d4

    • Size

      204KB

    • MD5

      00ad7d44fa463cbca7329a3d95c6c293

    • SHA1

      62bcabd3bc327c1e60142a4ea350383df5e39e73

    • SHA256

      72f587af57194349a60b7f921045886d399a49cbf3bf01c4c584aade0b41a0d4

    • SHA512

      f4421d0d49d1ee6fd023c73c014dfcebefbcaf044229210a6542fea5befc180903d809d4c150ea57fa186d1c51884b746c5bce7bdcfe4d5a160e22fb7a51012c

    • SSDEEP

      3072:I6p/Eq2fo4okuysR1dywSji/jNxeCAJObU2lf7rQhXrkm/rUsqQ:IQ/EaNysbUwNr3AJ3gvQmm

    Score
    10/10
    smokeloaderbackdoortrojan

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Blocklisted process makes network request

    • Downloads MZ/PE file

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks