Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

dridex

windows10-1703-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    79e78d1adb45ed95eef13d468a2d2a5c6f514f95771876397b57a7011f4f1279

  • Size

    1.5MB

  • Sample

    231125-s9f6zsbc68

  • MD5

    1dd5be4924927f98dc57e8428b2fa831

  • SHA1

    6ecb7c68828aba6ee452f58516a3f2e47c57a463

  • SHA256

    79e78d1adb45ed95eef13d468a2d2a5c6f514f95771876397b57a7011f4f1279

  • SHA512

    5ea53eb5f17b8521620f21d565e30739e8332be0a43ea71e5d4c89df255041ee8bb3f27f921dfc09921de7aaf2ac93518eb622685e6d74820e8cce9c348d8cfc

  • SSDEEP

    24576:2opGDjnvrPpkjos0OtjcFc5kM49dj+IuxWQOIjuJuVvhbqL0HtFcgekRP9dT0WNI:OnvrPGT0Egyudc4tI3bqL0NFchaP9dTy

Score
10/10
privateloaderrisepropersistence

Malware Config

Extracted

Family

risepro

C2

194.49.94.152

Targets

    • Target

      79e78d1adb45ed95eef13d468a2d2a5c6f514f95771876397b57a7011f4f1279

    • Size

      1.5MB

    • MD5

      1dd5be4924927f98dc57e8428b2fa831

    • SHA1

      6ecb7c68828aba6ee452f58516a3f2e47c57a463

    • SHA256

      79e78d1adb45ed95eef13d468a2d2a5c6f514f95771876397b57a7011f4f1279

    • SHA512

      5ea53eb5f17b8521620f21d565e30739e8332be0a43ea71e5d4c89df255041ee8bb3f27f921dfc09921de7aaf2ac93518eb622685e6d74820e8cce9c348d8cfc

    • SSDEEP

      24576:2opGDjnvrPpkjos0OtjcFc5kM49dj+IuxWQOIjuJuVvhbqL0HtFcgekRP9dT0WNI:OnvrPGT0Egyudc4tI3bqL0NFchaP9dTy

    Score
    7/10
    persistence

    • Drops startup file

    • Adds Run key to start application

      persistence
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks