Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

dridex

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6a093e57e1ee65534bb41fe1b7099d06e788cf23b15e738b95beeb1dfa84c7d4

  • Size

    376KB

  • Sample

    230505-kpetesba3y

  • MD5

    38f0f275b36ec13d8352f1a47fc5dbc5

  • SHA1

    cebcc272d5563f19d62f8d114a1fb56c14426c10

  • SHA256

    6a093e57e1ee65534bb41fe1b7099d06e788cf23b15e738b95beeb1dfa84c7d4

  • SHA512

    6e301fa61e83203a6a74067653bff8a88e2aa26158a789d4da75f70445853dcb84882c24f57dd3da97561d0838ed2c4fe79ce553a4e4117514991400672a9d03

  • SSDEEP

    6144:Koy+bnr+ap0yN90QE4Tl9WHDcpL8osTrEFpaeFCaewjQkunNIRutNR173bUznW84:4MrOy90ul9bp/oEFpHCaewUkuyRutNRx

Score
10/10
discoveryevasionpersistencespywarestealertrojan

Malware Config

Targets

    • Target

      6a093e57e1ee65534bb41fe1b7099d06e788cf23b15e738b95beeb1dfa84c7d4

    • Size

      376KB

    • MD5

      38f0f275b36ec13d8352f1a47fc5dbc5

    • SHA1

      cebcc272d5563f19d62f8d114a1fb56c14426c10

    • SHA256

      6a093e57e1ee65534bb41fe1b7099d06e788cf23b15e738b95beeb1dfa84c7d4

    • SHA512

      6e301fa61e83203a6a74067653bff8a88e2aa26158a789d4da75f70445853dcb84882c24f57dd3da97561d0838ed2c4fe79ce553a4e4117514991400672a9d03

    • SSDEEP

      6144:Koy+bnr+ap0yN90QE4Tl9WHDcpL8osTrEFpaeFCaewjQkunNIRutNR173bUznW84:4MrOy90ul9bp/oEFpHCaewUkuyRutNRx

    Score
    10/10
    discoveryevasionpersistencespywarestealertrojan

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v6

Tasks