Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

1

dridex

windows10-1703-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    767e24bd2ddbc19f639745c9f6152159465352a59c9393e6ef61bfcb0ab98e0a

  • Size

    3.4MB

  • Sample

    230313-lax7wsbf4z

  • MD5

    1f11f17ea4f84c1668f4592e48100942

  • SHA1

    9b7f0163fb51769431a5ba70f6b39c2954d7c17d

  • SHA256

    767e24bd2ddbc19f639745c9f6152159465352a59c9393e6ef61bfcb0ab98e0a

  • SHA512

    b4a8c2f5e0f5fd7d9dfbfaedea9e2fb9abf14191a1d3baefe3a31ad060268410685428861c3a276cf3879ef30071298a3610d9a215671b65544ddccdbde30fdd

  • SSDEEP

    98304:JWAaEU6/HWQ4noYOCtapQX9ejqcT3/SgYC:wBEH/QotQGrT3T

Score
9/10
discoveryevasiontrojanupx

Malware Config

Targets

    • Target

      767e24bd2ddbc19f639745c9f6152159465352a59c9393e6ef61bfcb0ab98e0a

    • Size

      3.4MB

    • MD5

      1f11f17ea4f84c1668f4592e48100942

    • SHA1

      9b7f0163fb51769431a5ba70f6b39c2954d7c17d

    • SHA256

      767e24bd2ddbc19f639745c9f6152159465352a59c9393e6ef61bfcb0ab98e0a

    • SHA512

      b4a8c2f5e0f5fd7d9dfbfaedea9e2fb9abf14191a1d3baefe3a31ad060268410685428861c3a276cf3879ef30071298a3610d9a215671b65544ddccdbde30fdd

    • SSDEEP

      98304:JWAaEU6/HWQ4noYOCtapQX9ejqcT3/SgYC:wBEH/QotQGrT3T

    Score
    9/10
    discoveryevasiontrojanupx

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Executes dropped EXE

    • Modifies file permissions

      discovery

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks whether UAC is enabled

      evasiontrojan

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks