Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

1

dridex

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c52717c8117f624fe9f2a2d4963cea2b1924e6b747a5af50183125555e671983

  • Size

    706KB

  • Sample

    230422-r6vpjafc93

  • MD5

    9ba889d68f60aea2ef345fa8c9bd34c0

  • SHA1

    3327db5334d4ee9096a0cb853281ce60dabac131

  • SHA256

    c52717c8117f624fe9f2a2d4963cea2b1924e6b747a5af50183125555e671983

  • SHA512

    bb9cff4d26e945af1038b44d73eb66e90db0b5c32a8ddfba96cf1ddd757075a2892aa3dee35fdb69f0bc51c96fb4bb251681d53f2eb0fdcce9fb51983d32a43b

  • SSDEEP

    12288:Ry907EKrFJ5Tz8vJZTYprYwMROWPT1RrXZtRhv8NcpCKBKH2gUdB:Ry3oFJ5/8xZ0prYxsWP7FhgxUL

Score
10/10
discoveryevasionpersistencespywarestealertrojan

Malware Config

Targets

    • Target

      c52717c8117f624fe9f2a2d4963cea2b1924e6b747a5af50183125555e671983

    • Size

      706KB

    • MD5

      9ba889d68f60aea2ef345fa8c9bd34c0

    • SHA1

      3327db5334d4ee9096a0cb853281ce60dabac131

    • SHA256

      c52717c8117f624fe9f2a2d4963cea2b1924e6b747a5af50183125555e671983

    • SHA512

      bb9cff4d26e945af1038b44d73eb66e90db0b5c32a8ddfba96cf1ddd757075a2892aa3dee35fdb69f0bc51c96fb4bb251681d53f2eb0fdcce9fb51983d32a43b

    • SSDEEP

      12288:Ry907EKrFJ5Tz8vJZTYprYwMROWPT1RrXZtRhv8NcpCKBKH2gUdB:Ry3oFJ5/8xZ0prYxsWP7FhgxUL

    Score
    10/10
    discoveryevasionpersistencespywarestealertrojan

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Windows security modification

      evasiontrojan

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v6

Tasks