Overview

overview

10

Static

static

1

dridex

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    77739c5d6a6613fb8d477ca5a79ffd35667a8a6139c8c2bcbf0dfd8865d137be

  • Size

    269KB

  • Sample

    230328-gvqakaba7w

  • MD5

    2c28e4d5c442288c06720e825064200f

  • SHA1

    0b3378466febe7acffee98a17db3a6c1a3e65393

  • SHA256

    77739c5d6a6613fb8d477ca5a79ffd35667a8a6139c8c2bcbf0dfd8865d137be

  • SHA512

    b957c2a04a7be72c03df272a0381d9e098d6bd047f8cbbedb6fb38f9a8b906c38c14bcd5f9940ab5bc1f86d59e85c0feaeff064d39775927a4a2d333b3a8d4a9

  • SSDEEP

    3072:hdPQF2YPMOjAj7LWM81cvCLmfBpq3WLFHnk1A6jHRKv//aT/lmhU:3rYvjAPLWPma3QHnp0NTf

Score
10/10
smokeloadersprgbackdoortrojan

Malware Config

Extracted

Family

smokeloader

Botnet

sprg

Extracted

Family

smokeloader

Version

2022

C2

http://hoh0aeghwugh2gie.com/

http://hie7doodohpae4na.com/

http://aek0aicifaloh1yo.com/

http://yic0oosaeiy7ahng.com/

http://wa5zu7sekai8xeih.com/
rc4.i32
rc4.i32

Targets

    • Target

      77739c5d6a6613fb8d477ca5a79ffd35667a8a6139c8c2bcbf0dfd8865d137be

    • Size

      269KB

    • MD5

      2c28e4d5c442288c06720e825064200f

    • SHA1

      0b3378466febe7acffee98a17db3a6c1a3e65393

    • SHA256

      77739c5d6a6613fb8d477ca5a79ffd35667a8a6139c8c2bcbf0dfd8865d137be

    • SHA512

      b957c2a04a7be72c03df272a0381d9e098d6bd047f8cbbedb6fb38f9a8b906c38c14bcd5f9940ab5bc1f86d59e85c0feaeff064d39775927a4a2d333b3a8d4a9

    • SSDEEP

      3072:hdPQF2YPMOjAj7LWM81cvCLmfBpq3WLFHnk1A6jHRKv//aT/lmhU:3rYvjAPLWPma3QHnp0NTf

    Score
    10/10
    smokeloadersprgbackdoortrojan
    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

2
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks