Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

dridex

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d314e4f2c5e7f5eb404d1ba5e72e44c55641f3a930304088183e27e14c2918de

  • Size

    640KB

  • Sample

    230503-qbx1qseg57

  • MD5

    f32e6f696a6c68a1f86f1ec6a42ae6de

  • SHA1

    a50aff89fd87afe4269c77997d8beb7478d37035

  • SHA256

    d314e4f2c5e7f5eb404d1ba5e72e44c55641f3a930304088183e27e14c2918de

  • SHA512

    87fab9cd754586b2f31958c6c5b3581ae94fbe95a4fdde3bedc2ded57f150146b75487226c8729f326f2ab6f934fefcffc94067830554c3c3c968356092e6565

  • SSDEEP

    12288:0iODgTlUNTxvBCwI/zO+nKomSgBQbAD1NpWaRvZU0LXZ6jEC:pxTsv0XKomSgSbABNpWavzLJUE

Score
10/10
lgoogloaderdownloaderpersistence

Malware Config

Targets

    • Target

      d314e4f2c5e7f5eb404d1ba5e72e44c55641f3a930304088183e27e14c2918de

    • Size

      640KB

    • MD5

      f32e6f696a6c68a1f86f1ec6a42ae6de

    • SHA1

      a50aff89fd87afe4269c77997d8beb7478d37035

    • SHA256

      d314e4f2c5e7f5eb404d1ba5e72e44c55641f3a930304088183e27e14c2918de

    • SHA512

      87fab9cd754586b2f31958c6c5b3581ae94fbe95a4fdde3bedc2ded57f150146b75487226c8729f326f2ab6f934fefcffc94067830554c3c3c968356092e6565

    • SSDEEP

      12288:0iODgTlUNTxvBCwI/zO+nKomSgBQbAD1NpWaRvZU0LXZ6jEC:pxTsv0XKomSgSbABNpWavzLJUE

    Score
    10/10
    lgoogloaderdownloaderpersistence

    • Detects LgoogLoader payload

    • LgoogLoader

      A downloader capable of dropping and executing other malware families.

      downloaderlgoogloader

    • Sets service image path in registry

      persistence

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks