Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

dridex

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bd9616ddf76a94040da1e28c70b7ed082ae87891b1d54bdfbc5d1bec02352b86

  • Size

    1.3MB

  • Sample

    221101-nt6z9abef3

  • MD5

    72f9fc1e77d1a4fc02aa92474cac897a

  • SHA1

    2f6301e2c9a2c4dead2ee797c4785c82e05afe68

  • SHA256

    bd9616ddf76a94040da1e28c70b7ed082ae87891b1d54bdfbc5d1bec02352b86

  • SHA512

    352f2684c02050af06b5ac4b6b4eae691ec970b184c3b38ac4137092d9e024ad1ddcd9f3ebe72273d93ef6f69e4ccc5c1e67aa573232bedffe481a15d3810897

  • SSDEEP

    24576:U2G/nvxW3Ww0t6TnzGmVBDh4+aknuRRZJND0gFJ4rD/IjC:UbA30GnzV/q+DnsXg

Score
10/10
dcratinfostealerrat

Malware Config

Targets

    • Target

      bd9616ddf76a94040da1e28c70b7ed082ae87891b1d54bdfbc5d1bec02352b86

    • Size

      1.3MB

    • MD5

      72f9fc1e77d1a4fc02aa92474cac897a

    • SHA1

      2f6301e2c9a2c4dead2ee797c4785c82e05afe68

    • SHA256

      bd9616ddf76a94040da1e28c70b7ed082ae87891b1d54bdfbc5d1bec02352b86

    • SHA512

      352f2684c02050af06b5ac4b6b4eae691ec970b184c3b38ac4137092d9e024ad1ddcd9f3ebe72273d93ef6f69e4ccc5c1e67aa573232bedffe481a15d3810897

    • SSDEEP

      24576:U2G/nvxW3Ww0t6TnzGmVBDh4+aknuRRZJND0gFJ4rD/IjC:UbA30GnzV/q+DnsXg

    Score
    10/10
    dcratinfostealerrat

    • DcRat

      DarkCrystal(DC) is a new .NET RAT active since June 2019 capable of loading additional plugins.

      ratinfostealerdcrat

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • DCRat payload

      Detects payload of DCRat, commonly dropped by NSIS installers.

      rat

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks