Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

dridex

windows10-1703-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8e62f0854f4caf3baaf4bc3c36d6cdeeb60b8170c06df00923cdadfd0ac3d80b

  • Size

    1.5MB

  • Sample

    231128-gjpjwsff9t

  • MD5

    c1a14d212cca0567abff9c7b4289424f

  • SHA1

    5ee9a529f27974177cdfcc1b53a7511c7f102a9d

  • SHA256

    8e62f0854f4caf3baaf4bc3c36d6cdeeb60b8170c06df00923cdadfd0ac3d80b

  • SHA512

    ab813244d19df13603f6e30461538889cf3c38b6a04e2e6af4fcc9f552a01d2e3d968198352a6b8d8e32df529f53f001be7794b5b32debe2824dd49a3aceef0b

  • SSDEEP

    24576:2opGDjnvrPpkjos0OtjcFc5kM49dj+IuxWQOIjuJuVvhbqL0HtFcgekRP9dT0WNI:OnvrPGT0Egyudc4tI3bqL0NFchaP9dTy

Score
10/10
privateloaderrisepropersistence

Malware Config

Extracted

Family

risepro

C2

194.49.94.152

Targets

    • Target

      8e62f0854f4caf3baaf4bc3c36d6cdeeb60b8170c06df00923cdadfd0ac3d80b

    • Size

      1.5MB

    • MD5

      c1a14d212cca0567abff9c7b4289424f

    • SHA1

      5ee9a529f27974177cdfcc1b53a7511c7f102a9d

    • SHA256

      8e62f0854f4caf3baaf4bc3c36d6cdeeb60b8170c06df00923cdadfd0ac3d80b

    • SHA512

      ab813244d19df13603f6e30461538889cf3c38b6a04e2e6af4fcc9f552a01d2e3d968198352a6b8d8e32df529f53f001be7794b5b32debe2824dd49a3aceef0b

    • SSDEEP

      24576:2opGDjnvrPpkjos0OtjcFc5kM49dj+IuxWQOIjuJuVvhbqL0HtFcgekRP9dT0WNI:OnvrPGT0Egyudc4tI3bqL0NFchaP9dTy

    Score
    7/10
    persistence

    • Drops startup file

    • Adds Run key to start application

      persistence
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks