Overview

overview

10

Static

static

1

dridex

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    344a4c4462ceaf3c4fe5834bc833d4039e287a1f23abe77eb12a991ee4210948

  • Size

    204KB

  • Sample

    230216-d463wsfc3t

  • MD5

    37259045d151e550432de1709310c2f5

  • SHA1

    1bf0dd3779825e9a3978e6a7abd186ba86858529

  • SHA256

    344a4c4462ceaf3c4fe5834bc833d4039e287a1f23abe77eb12a991ee4210948

  • SHA512

    0e3c98580564c197e533eb5deda52eecbfa00260c5ab2a4297218fa1ff6fae9c64714c0ab187ed69cd9788242d42a6767b3e8754512e14d6c78c7313de0bf45f

  • SSDEEP

    3072:rYkUfrqMFYMoVONClgp9yQFr/jswFJu71hb1OchSeo0Alp3B9Ejp/reLzQ:EHfrqQNmw0QOwjYf1OchSeo0Alyjpi

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Targets

    • Target

      344a4c4462ceaf3c4fe5834bc833d4039e287a1f23abe77eb12a991ee4210948

    • Size

      204KB

    • MD5

      37259045d151e550432de1709310c2f5

    • SHA1

      1bf0dd3779825e9a3978e6a7abd186ba86858529

    • SHA256

      344a4c4462ceaf3c4fe5834bc833d4039e287a1f23abe77eb12a991ee4210948

    • SHA512

      0e3c98580564c197e533eb5deda52eecbfa00260c5ab2a4297218fa1ff6fae9c64714c0ab187ed69cd9788242d42a6767b3e8754512e14d6c78c7313de0bf45f

    • SSDEEP

      3072:rYkUfrqMFYMoVONClgp9yQFr/jswFJu71hb1OchSeo0Alp3B9Ejp/reLzQ:EHfrqQNmw0QOwjYf1OchSeo0Alyjpi

    Score
    10/10
    smokeloaderbackdoortrojan

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Deletes itself

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks