Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

dridex

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2ee350a3c3c03283a1458ff5e3e142d91b46a8fecd846ec8df0d1edca7c1e4cf

  • Size

    5.6MB

  • Sample

    230102-k42azaha2s

  • MD5

    1208f9c380d451fe84aa21051a519c89

  • SHA1

    890d1683aa93556f2629ec0bae3d9646f2984426

  • SHA256

    2ee350a3c3c03283a1458ff5e3e142d91b46a8fecd846ec8df0d1edca7c1e4cf

  • SHA512

    0f80a61011a9d5af7097cb2c06b451109346cb442a84e8fe441c765789b41d014b605817f8b25a4e9309de02348441a13c4e97a957c34821468fc520c66f6978

  • SSDEEP

    98304:Xt+rFwL/Tl7c5BbRDhbeAmjUU4CaH/BSosMEMvisUk1rf/15IjjyeMrkitZi2vLu:EFwPl7G1benIUVafcoxTJ1rH15ICeMQm

Score
8/10
discovery

Malware Config

Targets

    • Target

      2ee350a3c3c03283a1458ff5e3e142d91b46a8fecd846ec8df0d1edca7c1e4cf

    • Size

      5.6MB

    • MD5

      1208f9c380d451fe84aa21051a519c89

    • SHA1

      890d1683aa93556f2629ec0bae3d9646f2984426

    • SHA256

      2ee350a3c3c03283a1458ff5e3e142d91b46a8fecd846ec8df0d1edca7c1e4cf

    • SHA512

      0f80a61011a9d5af7097cb2c06b451109346cb442a84e8fe441c765789b41d014b605817f8b25a4e9309de02348441a13c4e97a957c34821468fc520c66f6978

    • SSDEEP

      98304:Xt+rFwL/Tl7c5BbRDhbeAmjUU4CaH/BSosMEMvisUk1rf/15IjjyeMrkitZi2vLu:EFwPl7G1benIUVafcoxTJ1rH15ICeMQm

    Score
    8/10
    discovery

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks