Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

dridex

windows10-1703-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    80a01444afae594814e443794b23ea8ad781844fba353cb2a1d5096c143d7ac3

  • Size

    1.5MB

  • Sample

    231127-1p1nwsdb83

  • MD5

    eb398b8065b540c278d6a7e767d71abe

  • SHA1

    8be4cf8ae7994a4413bd2dc5fc65fe5d872b4f10

  • SHA256

    80a01444afae594814e443794b23ea8ad781844fba353cb2a1d5096c143d7ac3

  • SHA512

    67fe82eee03a71d892ba37abfd8a2a66dfacbdc4dda4d969a40679e7e80c53a3f593ab9ce99918e191671090d8d519382e6a25589ae81ed2fa430032d7dc9b97

  • SSDEEP

    24576:2opGDjnvrPpkjos0OtjcFc5kM49dj+IuxWQOIjuJuVvhbqL0HtFcgekRP9dT0WNI:OnvrPGT0Egyudc4tI3bqL0NFchaP9dTy

Score
10/10
privateloaderrisepropersistence

Malware Config

Extracted

Family

risepro

C2

194.49.94.152

Targets

    • Target

      80a01444afae594814e443794b23ea8ad781844fba353cb2a1d5096c143d7ac3

    • Size

      1.5MB

    • MD5

      eb398b8065b540c278d6a7e767d71abe

    • SHA1

      8be4cf8ae7994a4413bd2dc5fc65fe5d872b4f10

    • SHA256

      80a01444afae594814e443794b23ea8ad781844fba353cb2a1d5096c143d7ac3

    • SHA512

      67fe82eee03a71d892ba37abfd8a2a66dfacbdc4dda4d969a40679e7e80c53a3f593ab9ce99918e191671090d8d519382e6a25589ae81ed2fa430032d7dc9b97

    • SSDEEP

      24576:2opGDjnvrPpkjos0OtjcFc5kM49dj+IuxWQOIjuJuVvhbqL0HtFcgekRP9dT0WNI:OnvrPGT0Egyudc4tI3bqL0NFchaP9dTy

    Score
    7/10
    persistence

    • Drops startup file

    • Adds Run key to start application

      persistence
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks