Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

dridex

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c92a6ef242d78b9083c2264519be7dcf1d104f1e391a7d36ec066a4648057077

  • Size

    1.3MB

  • Sample

    230203-h9l25afh3w

  • MD5

    d917806a612e81e90cb934fa45b7feef

  • SHA1

    d7da2c3d176c679d9003301bd00f911a6df24299

  • SHA256

    c92a6ef242d78b9083c2264519be7dcf1d104f1e391a7d36ec066a4648057077

  • SHA512

    21eec40401f3bd73d7846574a2434053bae2938cae537c645cd78048924a8a515e8a914545b63728dddcef6d3803e71da342ee398845ad4fabb55a3fd62e7071

  • SSDEEP

    24576:U2G/nvxW3Ww0t6TnzGmVBDh4+aknuRRZJND0gFJ4rD/IjC:UbA30GnzV/q+DnsXg

Score
10/10
dcratinfostealerrat

Malware Config

Targets

    • Target

      c92a6ef242d78b9083c2264519be7dcf1d104f1e391a7d36ec066a4648057077

    • Size

      1.3MB

    • MD5

      d917806a612e81e90cb934fa45b7feef

    • SHA1

      d7da2c3d176c679d9003301bd00f911a6df24299

    • SHA256

      c92a6ef242d78b9083c2264519be7dcf1d104f1e391a7d36ec066a4648057077

    • SHA512

      21eec40401f3bd73d7846574a2434053bae2938cae537c645cd78048924a8a515e8a914545b63728dddcef6d3803e71da342ee398845ad4fabb55a3fd62e7071

    • SSDEEP

      24576:U2G/nvxW3Ww0t6TnzGmVBDh4+aknuRRZJND0gFJ4rD/IjC:UbA30GnzV/q+DnsXg

    Score
    10/10
    dcratinfostealerrat

    • DcRat

      DarkCrystal(DC) is a new .NET RAT active since June 2019 capable of loading additional plugins.

      ratinfostealerdcrat

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • DCRat payload

      Detects payload of DCRat, commonly dropped by NSIS installers.

      rat

    • Executes dropped EXE

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks