Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

1

dridex

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f7a7de6eb6c7aa1956e167274afb0df0fcfeee2c9ea12fda14be765d680f8b70

  • Size

    699KB

  • Sample

    230425-jwld4shc56

  • MD5

    bc4e2f9fb7cc768adf85cd76eb7b9ee8

  • SHA1

    7f4cad07a8d186f5196cb3fb91e21cb5a4f29a53

  • SHA256

    f7a7de6eb6c7aa1956e167274afb0df0fcfeee2c9ea12fda14be765d680f8b70

  • SHA512

    1d4637f2d3214714a248e93fe45bd269d5e21cc6873ad44e8a34799a790578f530ac749f6a731d0609d26b1b146cb7a18a73c8b62485fac77a63b5f82ba47c9f

  • SSDEEP

    12288:9y90m/BmD6rN5HgdAch29WEoSXrq1XA4GkFGlVfiGmWiPAHR9KqTfU9QfZYs3Tn:9y9jN59WpYf5rVviAHR9KqTfUKWs3r

Score
10/10
discoveryevasionpersistencespywarestealertrojan

Malware Config

Targets

    • Target

      f7a7de6eb6c7aa1956e167274afb0df0fcfeee2c9ea12fda14be765d680f8b70

    • Size

      699KB

    • MD5

      bc4e2f9fb7cc768adf85cd76eb7b9ee8

    • SHA1

      7f4cad07a8d186f5196cb3fb91e21cb5a4f29a53

    • SHA256

      f7a7de6eb6c7aa1956e167274afb0df0fcfeee2c9ea12fda14be765d680f8b70

    • SHA512

      1d4637f2d3214714a248e93fe45bd269d5e21cc6873ad44e8a34799a790578f530ac749f6a731d0609d26b1b146cb7a18a73c8b62485fac77a63b5f82ba47c9f

    • SSDEEP

      12288:9y90m/BmD6rN5HgdAch29WEoSXrq1XA4GkFGlVfiGmWiPAHR9KqTfU9QfZYs3Tn:9y9jN59WpYf5rVviAHR9KqTfUKWs3r

    Score
    10/10
    discoveryevasionpersistencespywarestealertrojan

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Windows security modification

      evasiontrojan

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v6

Tasks