Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

dridex

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a01b28949f0d3748fab82f68e37f78684db560e7fafa9d83c38263e733223625

  • Size

    21.1MB

  • Sample

    221122-j17sxaac9w

  • MD5

    70f9f9e4ab01d2e868a465766318b3a9

  • SHA1

    1d27498c2196142eee3c903122ab5ba5b57e0c71

  • SHA256

    a01b28949f0d3748fab82f68e37f78684db560e7fafa9d83c38263e733223625

  • SHA512

    0c2fc046c8d7fd3e0579c53f1a1b14479dbbe22f608f32e6f31e6097768c0a543cbaa32b7ad258db72bad8e8b1597073c508698465ff4512100808965fbe440e

  • SSDEEP

    393216:yZyv/E8B2FI3/VRn9zYlVCYKwnQJy4vcmgjZQGfaAWb3aaxbwDtz23bVKQ8n2iiB:LrBv39fzY+SnQJyagjZ5f2zwDJ2rp8nE

Score
8/10
persistence

Malware Config

Targets

    • Target

      a01b28949f0d3748fab82f68e37f78684db560e7fafa9d83c38263e733223625

    • Size

      21.1MB

    • MD5

      70f9f9e4ab01d2e868a465766318b3a9

    • SHA1

      1d27498c2196142eee3c903122ab5ba5b57e0c71

    • SHA256

      a01b28949f0d3748fab82f68e37f78684db560e7fafa9d83c38263e733223625

    • SHA512

      0c2fc046c8d7fd3e0579c53f1a1b14479dbbe22f608f32e6f31e6097768c0a543cbaa32b7ad258db72bad8e8b1597073c508698465ff4512100808965fbe440e

    • SSDEEP

      393216:yZyv/E8B2FI3/VRn9zYlVCYKwnQJy4vcmgjZQGfaAWb3aaxbwDtz23bVKQ8n2iiB:LrBv39fzY+SnQJyagjZ5f2zwDJ2rp8nE

    Score
    8/10
    persistence

    • Blocklisted process makes network request

    • Executes dropped EXE

    • Modifies Installed Components in the registry

      persistence

    • Registers COM server for autorun

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks