ece5032d62e954b56af6f1c4530d93449d845aaa52b44d939c1329c7673162cf | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

Static

static

1

dridex

windows10-1703-x64

Sharing

General

Target

ece5032d62e954b56af6f1c4530d93449d845aaa52b44d939c1329c7673162cf
Size

919KB
Sample

230420-yrpcjaea6y
MD5

9f8a0cf772670710b171b340ba02ea04
SHA1

d22799681a55e56160be775a0a75450110436589
SHA256

ece5032d62e954b56af6f1c4530d93449d845aaa52b44d939c1329c7673162cf
SHA512

1d04a31e875df77e96226cf5e9989cd3ec10b186a8b75aa748bba45e846c2aaf6122161ae388d72519e26eb10f9f6d61457716001b627b407de1304c55381e2e
SSDEEP

24576:TySGbbTN1iKSr6z2a/Kw2IPmhziJ78DbE08p:mS4ziKSWChG6E08

Score

10^/10

discovery evasion persistence spyware stealer trojan

Static task

static1

Behavioral task

behavioral1

Sample

ece5032d62e954b56af6f1c4530d93449d845aaa52b44d939c1329c7673162cf.exe

Resource

win10-20230220-en

discovery evasion persistence spyware stealer trojan

windows10-1703-x64

13 signatures

150 seconds

Malware Config

Targets

- Target
  
  ece5032d62e954b56af6f1c4530d93449d845aaa52b44d939c1329c7673162cf
- Size
  
  919KB
- MD5
  
  9f8a0cf772670710b171b340ba02ea04
- SHA1
  
  d22799681a55e56160be775a0a75450110436589
- SHA256
  
  ece5032d62e954b56af6f1c4530d93449d845aaa52b44d939c1329c7673162cf
- SHA512
  
  1d04a31e875df77e96226cf5e9989cd3ec10b186a8b75aa748bba45e846c2aaf6122161ae388d72519e26eb10f9f6d61457716001b627b407de1304c55381e2e
- SSDEEP
  
  24576:TySGbbTN1iKSr6z2a/Kw2IPmhziJ78DbE08p:mS4ziKSWChG6E08
Score

10^/10

discovery evasion persistence spyware stealer trojan
- Modifies Windows Defender Real-time Protection settings
  evasion trojan
- Executes dropped EXE
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Windows security modification
  evasion trojan
- Accesses cryptocurrency files/wallets, possible credential harvesting
  spyware
- Adds Run key to start application
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Modify Existing Service

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Disabling Security Tools

Modify Registry

Credential Access

Credentials in Files

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistencespywarestealertrojan

© 2018-2025

Terms | Privacy