Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

dridex

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    db10b6ec4bddf6925cd5ffd857d2e8019ef5c26044199749a714f3833cfc899d

  • Size

    1.3MB

  • Sample

    221101-zahdbsegh5

  • MD5

    987a93f8d830e1007ad7b0fc9699740f

  • SHA1

    fe41c3c1398dc0e8890d86776e28576b00bcff42

  • SHA256

    db10b6ec4bddf6925cd5ffd857d2e8019ef5c26044199749a714f3833cfc899d

  • SHA512

    2f83a045d4d1362731eee6a7e6770aa2c9ffa9a4209c6381ec959fdef22577209d75cc8638fd3fc9f1dd2715cf2550ec34f30b479eca34ca152d928df92e6b52

  • SSDEEP

    24576:U2G/nvxW3Ww0t6TnzGmVBDh4+aknuRRZJND0gFJ4rD/IjC:UbA30GnzV/q+DnsXg

Score
10/10
dcratinfostealerrat

Malware Config

Targets

    • Target

      db10b6ec4bddf6925cd5ffd857d2e8019ef5c26044199749a714f3833cfc899d

    • Size

      1.3MB

    • MD5

      987a93f8d830e1007ad7b0fc9699740f

    • SHA1

      fe41c3c1398dc0e8890d86776e28576b00bcff42

    • SHA256

      db10b6ec4bddf6925cd5ffd857d2e8019ef5c26044199749a714f3833cfc899d

    • SHA512

      2f83a045d4d1362731eee6a7e6770aa2c9ffa9a4209c6381ec959fdef22577209d75cc8638fd3fc9f1dd2715cf2550ec34f30b479eca34ca152d928df92e6b52

    • SSDEEP

      24576:U2G/nvxW3Ww0t6TnzGmVBDh4+aknuRRZJND0gFJ4rD/IjC:UbA30GnzV/q+DnsXg

    Score
    10/10
    dcratinfostealerrat

    • DcRat

      DarkCrystal(DC) is a new .NET RAT active since June 2019 capable of loading additional plugins.

      ratinfostealerdcrat

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • DCRat payload

      Detects payload of DCRat, commonly dropped by NSIS installers.

      rat

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks