Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

dridex

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    536dcfe1281c77a91c68cd32c71d861af28152bf8c7d24791ab5ae35d00b1a36

  • Size

    2.1MB

  • Sample

    230804-xjpgwsfb5v

  • MD5

    c94eff4a0c5bdac49eaba7dd5136ef85

  • SHA1

    5a1338a353311d8a65369a5baddf5b4d0c92fe5f

  • SHA256

    536dcfe1281c77a91c68cd32c71d861af28152bf8c7d24791ab5ae35d00b1a36

  • SHA512

    edb4bf474cadfc03f82d33d04d6bda666df8650d5a95a9bad6e91ba2d714d7ed5948ab470265e4cfaff83e86c68087115bd895af9a3432f0e2a0589d4cb7f811

  • SSDEEP

    24576:Odh179KshENVOrFU+Wabtg/9OPqlp+d5ZIAIYajXwPtZ+PJ5Gv04+7IMm93RYEA+:ABTXXREkPWgd0ljyz+PJImKhNAuCgD

Score
10/10
netsupportrat

Malware Config

Targets

    • Target

      536dcfe1281c77a91c68cd32c71d861af28152bf8c7d24791ab5ae35d00b1a36

    • Size

      2.1MB

    • MD5

      c94eff4a0c5bdac49eaba7dd5136ef85

    • SHA1

      5a1338a353311d8a65369a5baddf5b4d0c92fe5f

    • SHA256

      536dcfe1281c77a91c68cd32c71d861af28152bf8c7d24791ab5ae35d00b1a36

    • SHA512

      edb4bf474cadfc03f82d33d04d6bda666df8650d5a95a9bad6e91ba2d714d7ed5948ab470265e4cfaff83e86c68087115bd895af9a3432f0e2a0589d4cb7f811

    • SSDEEP

      24576:Odh179KshENVOrFU+Wabtg/9OPqlp+d5ZIAIYajXwPtZ+PJ5Gv04+7IMm93RYEA+:ABTXXREkPWgd0ljyz+PJImKhNAuCgD

    Score
    10/10
    netsupportrat

    • NetSupport

      NetSupport is a remote access tool sold as a legitimate system administration software.

      ratnetsupport

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks