Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

dridex

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0e729e99e331549dd945910d0c1a3d174e7d62dcd796707783aac600d90fb345

  • Size

    1.1MB

  • Sample

    230920-xj6q6scb56

  • MD5

    074996a13d1421769ce0474211a08ff4

  • SHA1

    b58c3a3064b218790e9bcbe1e65fa75a7c45b73c

  • SHA256

    0e729e99e331549dd945910d0c1a3d174e7d62dcd796707783aac600d90fb345

  • SHA512

    14e650295b573139045e95510d9d3d0e97fb79823c9b5b10d2671acc6080df46ceafb221a19c0ec2ea7e37cc9bbe86446d1d05478740be8516f61cbe5f712269

  • SSDEEP

    24576:Ey5q8KHVDUFEuoEwSKbU+kdTXIcJBs/NxIj2wuB+:T5qZ1DdEwlIdT4A0wj2wuB

Score
10/10
healerdropperevasionpersistencetrojan

Malware Config

Targets

    • Target

      0e729e99e331549dd945910d0c1a3d174e7d62dcd796707783aac600d90fb345

    • Size

      1.1MB

    • MD5

      074996a13d1421769ce0474211a08ff4

    • SHA1

      b58c3a3064b218790e9bcbe1e65fa75a7c45b73c

    • SHA256

      0e729e99e331549dd945910d0c1a3d174e7d62dcd796707783aac600d90fb345

    • SHA512

      14e650295b573139045e95510d9d3d0e97fb79823c9b5b10d2671acc6080df46ceafb221a19c0ec2ea7e37cc9bbe86446d1d05478740be8516f61cbe5f712269

    • SSDEEP

      24576:Ey5q8KHVDUFEuoEwSKbU+kdTXIcJBs/NxIj2wuB+:T5qZ1DdEwlIdT4A0wj2wuB

    Score
    10/10
    healerdropperevasionpersistencetrojan

    • Detects Healer an antivirus disabler dropper

    • Healer

      Healer an antivirus disabler dropper.

      dropperhealer

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks