Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

dridex

windows10-1703-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bfc83919bff11c630a90c559ddc1deb8316453c0cd492e8f1251d9e5e262700c

  • Size

    1.0MB

  • Sample

    230109-mc3e3ahc9t

  • MD5

    7d0ec78a9495cea56b5b5716d28f2590

  • SHA1

    6367a468e35540e1480b744e99ba864e972e6c35

  • SHA256

    bfc83919bff11c630a90c559ddc1deb8316453c0cd492e8f1251d9e5e262700c

  • SHA512

    c94fce36d141f00b1dd807804e8099fb88d2bacc21f8f88b48d0ef7d4eeab165a9e0098d69f66515d4f20731fa01735ff19101c445d7e66358dc3163f38d84c5

  • SSDEEP

    24576:pj/qbiEMYfjf2rdgvJUu9wCf3LsM/b2Axh6+PT:pj/6ffQEXwCD7/b2AxnL

Score
8/10
discoverypersistence

Malware Config

Targets

    • Target

      bfc83919bff11c630a90c559ddc1deb8316453c0cd492e8f1251d9e5e262700c

    • Size

      1.0MB

    • MD5

      7d0ec78a9495cea56b5b5716d28f2590

    • SHA1

      6367a468e35540e1480b744e99ba864e972e6c35

    • SHA256

      bfc83919bff11c630a90c559ddc1deb8316453c0cd492e8f1251d9e5e262700c

    • SHA512

      c94fce36d141f00b1dd807804e8099fb88d2bacc21f8f88b48d0ef7d4eeab165a9e0098d69f66515d4f20731fa01735ff19101c445d7e66358dc3163f38d84c5

    • SSDEEP

      24576:pj/qbiEMYfjf2rdgvJUu9wCf3LsM/b2Axh6+PT:pj/6ffQEXwCD7/b2AxnL

    Score
    8/10
    discoverypersistence

    • Blocklisted process makes network request

    • Sets DLL path for service in the registry

      persistence

    • Sets service image path in registry

      persistence

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks