Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

dridex

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3a6cc24bd51c96a3b4c137399066e10722c5434b04313c153bdca33b2795eed4

  • Size

    10.8MB

  • Sample

    230203-rrw9taff94

  • MD5

    a73528d4fea4d334a7a1107241ac075c

  • SHA1

    7e77d048dff2717295194d11970d45f2a895b467

  • SHA256

    3a6cc24bd51c96a3b4c137399066e10722c5434b04313c153bdca33b2795eed4

  • SHA512

    ab8e2ea25294e8095d0e138cb7659ff8a4676cfae1168c52f7c33e3fee198576f48af81d88a7512cf4f1e83240d899f0ddc522ea3959682e2c013f4a49bf5cbc

  • SSDEEP

    196608:owu78K/NQLzKdQmRJ8dA6lguVaycBIGpEXZo6hTOv+QKf8bC5pFn7YW:Vu7L/S/KdQuslgl9gZoWOv+9fRL

Score
7/10
pyinstaller

Malware Config

Targets

    • Target

      3a6cc24bd51c96a3b4c137399066e10722c5434b04313c153bdca33b2795eed4

    • Size

      10.8MB

    • MD5

      a73528d4fea4d334a7a1107241ac075c

    • SHA1

      7e77d048dff2717295194d11970d45f2a895b467

    • SHA256

      3a6cc24bd51c96a3b4c137399066e10722c5434b04313c153bdca33b2795eed4

    • SHA512

      ab8e2ea25294e8095d0e138cb7659ff8a4676cfae1168c52f7c33e3fee198576f48af81d88a7512cf4f1e83240d899f0ddc522ea3959682e2c013f4a49bf5cbc

    • SSDEEP

      196608:owu78K/NQLzKdQmRJ8dA6lguVaycBIGpEXZo6hTOv+QKf8bC5pFn7YW:Vu7L/S/KdQuslgl9gZoWOv+9fRL

    Score
    7/10

    • Loads dropped DLL

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1

MITRE ATT&CK Matrix

Tasks