Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

dridex

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a7effb59980b70b29a2658ab0644081b2fc09cbe6df21a986b478a7256107f2a

  • Size

    753KB

  • Sample

    230608-ezz98ace6y

  • MD5

    bfcfb45e9b4520f8426f9644c824d754

  • SHA1

    33113504dfa7fee76fd4e1a271cd4648fe8b8c5c

  • SHA256

    a7effb59980b70b29a2658ab0644081b2fc09cbe6df21a986b478a7256107f2a

  • SHA512

    4ae7dc2c24be99b73f50d5f92da46406e6f8e7f872b679f0589283eb83e3ddc18ae5547a69c209458959fc47493965d7379c885f04cc111dfedd0374c8d9761f

  • SSDEEP

    12288:EMrvy90FUfUD5D3JqLsYc+JGz3/MeUS4ppZI141oO3ITPMy1dM3vlmzqUpa9MO5f:LySlpZqYJPM5SGZ34zbg9l5v

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      a7effb59980b70b29a2658ab0644081b2fc09cbe6df21a986b478a7256107f2a

    • Size

      753KB

    • MD5

      bfcfb45e9b4520f8426f9644c824d754

    • SHA1

      33113504dfa7fee76fd4e1a271cd4648fe8b8c5c

    • SHA256

      a7effb59980b70b29a2658ab0644081b2fc09cbe6df21a986b478a7256107f2a

    • SHA512

      4ae7dc2c24be99b73f50d5f92da46406e6f8e7f872b679f0589283eb83e3ddc18ae5547a69c209458959fc47493965d7379c885f04cc111dfedd0374c8d9761f

    • SSDEEP

      12288:EMrvy90FUfUD5D3JqLsYc+JGz3/MeUS4ppZI141oO3ITPMy1dM3vlmzqUpa9MO5f:LySlpZqYJPM5SGZ34zbg9l5v

    Score
    10/10
    evasionpersistencetrojan

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks