Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

dridex

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    741ef1dd52cf5fd0aec99dbeb3dcdfa36087209c9018460253a93a67b105a560

  • Size

    375KB

  • Sample

    221007-fcaxgsbggr

  • MD5

    045f54824bd433f67d474fdbd94a8257

  • SHA1

    43d3c8ba440591bb3d7bae145d9e69d455c2592a

  • SHA256

    741ef1dd52cf5fd0aec99dbeb3dcdfa36087209c9018460253a93a67b105a560

  • SHA512

    0f7c3616189a022e677685e2ade31a005cae43081146e5e3834e3c119248b8b0de7f0cecc4107db7d97209dfd9b6aee1612bf2e7dd06912d33e20578d2b1c3af

  • SSDEEP

    6144:Cv5zQJVb5p72cHF1ybDFwekh212KhvwIb759QOaBjpaVRPu23E2rJmWjFc94:C4VOiF1WD7kE1dTYOi8V5u23zmWFy4

Score
10/10
gh0stratratupx

Malware Config

Targets

    • Target

      741ef1dd52cf5fd0aec99dbeb3dcdfa36087209c9018460253a93a67b105a560

    • Size

      375KB

    • MD5

      045f54824bd433f67d474fdbd94a8257

    • SHA1

      43d3c8ba440591bb3d7bae145d9e69d455c2592a

    • SHA256

      741ef1dd52cf5fd0aec99dbeb3dcdfa36087209c9018460253a93a67b105a560

    • SHA512

      0f7c3616189a022e677685e2ade31a005cae43081146e5e3834e3c119248b8b0de7f0cecc4107db7d97209dfd9b6aee1612bf2e7dd06912d33e20578d2b1c3af

    • SSDEEP

      6144:Cv5zQJVb5p72cHF1ybDFwekh212KhvwIb759QOaBjpaVRPu23E2rJmWjFc94:C4VOiF1WD7kE1dTYOi8V5u23zmWFy4

    Score
    10/10
    gh0stratratupx

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks