Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

dridex

windows10-1703-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c3ede9631d1c8c2fe2843e21a4d9116be7a2e086e686b5f84965ec288d81c63c

  • Size

    1.5MB

  • Sample

    231128-j9yatsgd86

  • MD5

    e6df4dc3a3268ee7f68d4ca2ea837da8

  • SHA1

    a0669ba74b65988783f38ec7dd0364244aa1346d

  • SHA256

    c3ede9631d1c8c2fe2843e21a4d9116be7a2e086e686b5f84965ec288d81c63c

  • SHA512

    5eafe521df7d8ceb2eb32053ad603e4a6bd9eb62f2421914b577b5625c7d5e26bef28df634a20f0334260970a98c2572eab572ae1399eb14be5a066f5e30a7fb

  • SSDEEP

    24576:2opGDjnvrPpkjos0OtjcFc5kM49dj+IuxWQOIjuJuVvhbqL0HtFcgekRP9dT0WtI:OnvrPGT0Egyudc4tI3bqL0NFchaP9dTS

Score
10/10
privateloaderrisepropersistence

Malware Config

Extracted

Family

risepro

C2

194.49.94.152

Targets

    • Target

      c3ede9631d1c8c2fe2843e21a4d9116be7a2e086e686b5f84965ec288d81c63c

    • Size

      1.5MB

    • MD5

      e6df4dc3a3268ee7f68d4ca2ea837da8

    • SHA1

      a0669ba74b65988783f38ec7dd0364244aa1346d

    • SHA256

      c3ede9631d1c8c2fe2843e21a4d9116be7a2e086e686b5f84965ec288d81c63c

    • SHA512

      5eafe521df7d8ceb2eb32053ad603e4a6bd9eb62f2421914b577b5625c7d5e26bef28df634a20f0334260970a98c2572eab572ae1399eb14be5a066f5e30a7fb

    • SSDEEP

      24576:2opGDjnvrPpkjos0OtjcFc5kM49dj+IuxWQOIjuJuVvhbqL0HtFcgekRP9dT0WtI:OnvrPGT0Egyudc4tI3bqL0NFchaP9dTS

    Score
    7/10
    persistence

    • Drops startup file

    • Adds Run key to start application

      persistence
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks