Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

1

dridex

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2be58db5e7b4ef38c1e08f1c79bcdfaa90a4fe19fabe3bdb0a8d8994c8abad57

  • Size

    559KB

  • Sample

    230422-t65wlsfg36

  • MD5

    2ed975bca125e3df12a654ba67f293e3

  • SHA1

    ed4a367dfe5ec19860debcae9ea12d6c7077ff26

  • SHA256

    2be58db5e7b4ef38c1e08f1c79bcdfaa90a4fe19fabe3bdb0a8d8994c8abad57

  • SHA512

    b21e02615b588deb3822ffbe04e4ab07eaabb39c36806ca2c3938b0c674b7e236af00385b8f10f94b2f2c57d6b46a3a7d46243f2b03cbab762763370c2a436fa

  • SSDEEP

    12288:sy90pfspWpAwg/PI0xM6bFTia4ekFc9KKMVVbBJTodz3bA:syuA2AwgPM6CRW9dKNc3M

Score
10/10
discoveryevasionpersistencespywarestealertrojan

Malware Config

Targets

    • Target

      2be58db5e7b4ef38c1e08f1c79bcdfaa90a4fe19fabe3bdb0a8d8994c8abad57

    • Size

      559KB

    • MD5

      2ed975bca125e3df12a654ba67f293e3

    • SHA1

      ed4a367dfe5ec19860debcae9ea12d6c7077ff26

    • SHA256

      2be58db5e7b4ef38c1e08f1c79bcdfaa90a4fe19fabe3bdb0a8d8994c8abad57

    • SHA512

      b21e02615b588deb3822ffbe04e4ab07eaabb39c36806ca2c3938b0c674b7e236af00385b8f10f94b2f2c57d6b46a3a7d46243f2b03cbab762763370c2a436fa

    • SSDEEP

      12288:sy90pfspWpAwg/PI0xM6bFTia4ekFc9KKMVVbBJTodz3bA:syuA2AwgPM6CRW9dKNc3M

    Score
    10/10
    discoveryevasionpersistencespywarestealertrojan

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Windows security modification

      evasiontrojan

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v6

Tasks