Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

dridex

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    708610268fd91394339178b5cd4b2bfb65783554853e09b29d8b6d7bb576d7de

  • Size

    376KB

  • Sample

    230505-elh4saab8z

  • MD5

    4d36964e6a13cdad5f6da9fa38e3ce37

  • SHA1

    331a6faa359e4c5150cdd782f955fc840f6a4e95

  • SHA256

    708610268fd91394339178b5cd4b2bfb65783554853e09b29d8b6d7bb576d7de

  • SHA512

    5d6c24b840a99ae75f7d49d449a68a2f96a968b5a512aa41268af32be2a9f12a673475f7dc261272695eca6ac79931d9de35eff5b8db67f38ce8c86f0f5eda0c

  • SSDEEP

    6144:Kzy+bnr+Cp0yN90QE/oJEdrqCnEvbvIEp6ZTaMkvyR2GI60E1hng2VDPSPxoCdjR:JMryy900QEcwER86/LndDYZjt8g

Score
10/10
discoveryevasionpersistencespywarestealertrojan

Malware Config

Targets

    • Target

      708610268fd91394339178b5cd4b2bfb65783554853e09b29d8b6d7bb576d7de

    • Size

      376KB

    • MD5

      4d36964e6a13cdad5f6da9fa38e3ce37

    • SHA1

      331a6faa359e4c5150cdd782f955fc840f6a4e95

    • SHA256

      708610268fd91394339178b5cd4b2bfb65783554853e09b29d8b6d7bb576d7de

    • SHA512

      5d6c24b840a99ae75f7d49d449a68a2f96a968b5a512aa41268af32be2a9f12a673475f7dc261272695eca6ac79931d9de35eff5b8db67f38ce8c86f0f5eda0c

    • SSDEEP

      6144:Kzy+bnr+Cp0yN90QE/oJEdrqCnEvbvIEp6ZTaMkvyR2GI60E1hng2VDPSPxoCdjR:JMryy900QEcwER86/LndDYZjt8g

    Score
    10/10
    discoveryevasionpersistencespywarestealertrojan

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v6

Tasks