Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

dridex

windows10-1703-x64

7

Resubmissions

27/11/2023, 03:08

231127-dndfmsdh9t 10

27/11/2023, 03:01

231127-djbfgsea39 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    20d8d3d6c8a4cddcf85af2a82772bd13643dd83f2ec78809ed7b6a7da3e36bd3

  • Size

    1.5MB

  • Sample

    231127-djbfgsea39

  • MD5

    a9fa88bf4f0dd0f04e4d3ae2eed639c7

  • SHA1

    2000e00dec927545c51d6107653fe9ec22127683

  • SHA256

    20d8d3d6c8a4cddcf85af2a82772bd13643dd83f2ec78809ed7b6a7da3e36bd3

  • SHA512

    91afef992df139fefc47069a2f7ff4a07edd6570680cb9365ccae67869a1b03c8457661df94d1632eb3eff5bae515dc4e73ef8542d3886b132416a5dd3fb8c52

  • SSDEEP

    24576:2opGDjnvrPpkjos0OtjcFc5kM49dj+IuxWQOIjuJuVvhbqL0HtFcgekRP9dT0WNI:OnvrPGT0Egyudc4tI3bqL0NFchaP9dTy

Score
10/10
privateloaderrisepropersistence

Malware Config

Extracted

Family

risepro

C2

194.49.94.152

Targets

    • Target

      20d8d3d6c8a4cddcf85af2a82772bd13643dd83f2ec78809ed7b6a7da3e36bd3

    • Size

      1.5MB

    • MD5

      a9fa88bf4f0dd0f04e4d3ae2eed639c7

    • SHA1

      2000e00dec927545c51d6107653fe9ec22127683

    • SHA256

      20d8d3d6c8a4cddcf85af2a82772bd13643dd83f2ec78809ed7b6a7da3e36bd3

    • SHA512

      91afef992df139fefc47069a2f7ff4a07edd6570680cb9365ccae67869a1b03c8457661df94d1632eb3eff5bae515dc4e73ef8542d3886b132416a5dd3fb8c52

    • SSDEEP

      24576:2opGDjnvrPpkjos0OtjcFc5kM49dj+IuxWQOIjuJuVvhbqL0HtFcgekRP9dT0WNI:OnvrPGT0Egyudc4tI3bqL0NFchaP9dTy

    Score
    7/10
    persistence

    • Drops startup file

    • Adds Run key to start application

      persistence
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks