Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

dridex

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    89ee2ebc50c865b5d9b1f35b74f5c051ecc5ac3b8c233c0c5c8a7b1072237bb0

  • Size

    185KB

  • Sample

    221011-s9k5yacfdk

  • MD5

    de2e9c0c0ad246abb9bd5b6b2e16a46e

  • SHA1

    a60d234e5f43235b52c90b613de869baeda38403

  • SHA256

    89ee2ebc50c865b5d9b1f35b74f5c051ecc5ac3b8c233c0c5c8a7b1072237bb0

  • SHA512

    1ae208959114677fc8ff07205204408adac996964f63b476b49d3b29054a88551f7d878a3e73158ceae83e9a5385f949f158a6bec1437a223427d01c9fd21ef8

  • SSDEEP

    3072:l1NjcVVnLpPunbpKxmuQC0Ao1X/JQdxSwihRSL/iQW5iuUllDPUKJioJWidIKWP8:HNeZmpG+C0AoYswihRXQt/D8K4oJdJrh

Score
10/10
lokibotcollectionspywarestealertrojan

Malware Config

Targets

    • Target

      89ee2ebc50c865b5d9b1f35b74f5c051ecc5ac3b8c233c0c5c8a7b1072237bb0

    • Size

      185KB

    • MD5

      de2e9c0c0ad246abb9bd5b6b2e16a46e

    • SHA1

      a60d234e5f43235b52c90b613de869baeda38403

    • SHA256

      89ee2ebc50c865b5d9b1f35b74f5c051ecc5ac3b8c233c0c5c8a7b1072237bb0

    • SHA512

      1ae208959114677fc8ff07205204408adac996964f63b476b49d3b29054a88551f7d878a3e73158ceae83e9a5385f949f158a6bec1437a223427d01c9fd21ef8

    • SSDEEP

      3072:l1NjcVVnLpPunbpKxmuQC0Ao1X/JQdxSwihRSL/iQW5iuUllDPUKJioJWidIKWP8:HNeZmpG+C0AoYswihRXQt/D8K4oJdJrh

    Score
    10/10
    lokibotcollectionspywarestealertrojan

    • Lokibot

      Lokibot is a Password and CryptoCoin Wallet Stealer.

      trojanspywarestealerlokibot

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses Microsoft Outlook profiles

      collection

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks