Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

dridex

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    de07e46f83f280f37e1f83a602a7673fe1844ed4a52be14c8ae5760a9fa1d1cb

  • Size

    286KB

  • Sample

    221217-jmrjrsgc99

  • MD5

    8db42d4730e86fde86fbd7ba3cee7d1a

  • SHA1

    2761f6379cf22e62658eb166a147c9a354b4e883

  • SHA256

    de07e46f83f280f37e1f83a602a7673fe1844ed4a52be14c8ae5760a9fa1d1cb

  • SHA512

    9b506f70f8272ab24f27a193bfd9a1ce4ea230cd03e5386db90ee7c50df1c78d173f98f225748a4981a4c3ce29d91c841c450c77ac9db03bf1bb85312cd42c9a

  • SSDEEP

    6144:8jLMhEpZ5Mn4wjKq4ZamidWrqZRK2gzwB040M2b:8jjnm4eKq4ZamkR2q

Score
10/10
rhadamanthysstealer

Malware Config

Targets

    • Target

      de07e46f83f280f37e1f83a602a7673fe1844ed4a52be14c8ae5760a9fa1d1cb

    • Size

      286KB

    • MD5

      8db42d4730e86fde86fbd7ba3cee7d1a

    • SHA1

      2761f6379cf22e62658eb166a147c9a354b4e883

    • SHA256

      de07e46f83f280f37e1f83a602a7673fe1844ed4a52be14c8ae5760a9fa1d1cb

    • SHA512

      9b506f70f8272ab24f27a193bfd9a1ce4ea230cd03e5386db90ee7c50df1c78d173f98f225748a4981a4c3ce29d91c841c450c77ac9db03bf1bb85312cd42c9a

    • SSDEEP

      6144:8jLMhEpZ5Mn4wjKq4ZamidWrqZRK2gzwB040M2b:8jjnm4eKq4ZamkR2q

    Score
    10/10
    rhadamanthysstealer

    • Detect rhadamanthys stealer shellcode

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

      stealerrhadamanthys

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1

MITRE ATT&CK Matrix

Tasks