Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

dridex

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a01b28949f0d3748fab82f68e37f78684db560e7fafa9d83c38263e733223625

  • Size

    21.1MB

  • Sample

    221122-j17sxaac9w

  • MD5

    70f9f9e4ab01d2e868a465766318b3a9

  • SHA1

    1d27498c2196142eee3c903122ab5ba5b57e0c71

  • SHA256

    a01b28949f0d3748fab82f68e37f78684db560e7fafa9d83c38263e733223625

  • SHA512

    0c2fc046c8d7fd3e0579c53f1a1b14479dbbe22f608f32e6f31e6097768c0a543cbaa32b7ad258db72bad8e8b1597073c508698465ff4512100808965fbe440e

  • SSDEEP

    393216:yZyv/E8B2FI3/VRn9zYlVCYKwnQJy4vcmgjZQGfaAWb3aaxbwDtz23bVKQ8n2iiB:LrBv39fzY+SnQJyagjZ5f2zwDJ2rp8nE

Score
8/10
persistence

Malware Config

Targets

    • Target

      a01b28949f0d3748fab82f68e37f78684db560e7fafa9d83c38263e733223625

    • Size

      21.1MB

    • MD5

      70f9f9e4ab01d2e868a465766318b3a9

    • SHA1

      1d27498c2196142eee3c903122ab5ba5b57e0c71

    • SHA256

      a01b28949f0d3748fab82f68e37f78684db560e7fafa9d83c38263e733223625

    • SHA512

      0c2fc046c8d7fd3e0579c53f1a1b14479dbbe22f608f32e6f31e6097768c0a543cbaa32b7ad258db72bad8e8b1597073c508698465ff4512100808965fbe440e

    • SSDEEP

      393216:yZyv/E8B2FI3/VRn9zYlVCYKwnQJy4vcmgjZQGfaAWb3aaxbwDtz23bVKQ8n2iiB:LrBv39fzY+SnQJyagjZ5f2zwDJ2rp8nE

    Score
    8/10
    persistence

    • Blocklisted process makes network request

    • Executes dropped EXE

    • Modifies Installed Components in the registry

      persistence

    • Registers COM server for autorun

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.