Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

dridex

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e7083d5d6b02b99606601d2484e404fc699623dcff41a853a1091103600bd3cf

  • Size

    190KB

  • Sample

    231211-rgypwsggcn

  • MD5

    c6a8dfbca3283f2a4cc76d41b75279ea

  • SHA1

    c916b2402470cd067080796309c4eec84e524f34

  • SHA256

    e7083d5d6b02b99606601d2484e404fc699623dcff41a853a1091103600bd3cf

  • SHA512

    e1a1592f2e10c426ecc2a2d0869be9340eff105a7c3b83868018ff81788fff6b443c6ffeab8412376e4967c26c9eaa4cb6709c3746fd7f6afff3ba765dd76bcb

  • SSDEEP

    3072:pbt/fZLXa6rlGe4EWiZMkp133kFkirCupzWnn0vNSch0bB+vBjZ5mAq:X/RLK6rse8wMkHUMKmOZh02BG

Score
10/10
stealcdiscoverystealer

Malware Config

Extracted

Family

stealc

C2

http://77.91.76.36

Attributes
  • url_path

    /3886d2276f6914c4.php

rc4.plain

Targets

    • Target

      e7083d5d6b02b99606601d2484e404fc699623dcff41a853a1091103600bd3cf

    • Size

      190KB

    • MD5

      c6a8dfbca3283f2a4cc76d41b75279ea

    • SHA1

      c916b2402470cd067080796309c4eec84e524f34

    • SHA256

      e7083d5d6b02b99606601d2484e404fc699623dcff41a853a1091103600bd3cf

    • SHA512

      e1a1592f2e10c426ecc2a2d0869be9340eff105a7c3b83868018ff81788fff6b443c6ffeab8412376e4967c26c9eaa4cb6709c3746fd7f6afff3ba765dd76bcb

    • SSDEEP

      3072:pbt/fZLXa6rlGe4EWiZMkp133kFkirCupzWnn0vNSch0bB+vBjZ5mAq:X/RLK6rse8wMkHUMKmOZh02BG

    Score
    10/10
    stealcdiscoverystealer

    • Stealc

      Stealc is an infostealer written in C++.

      stealerstealc

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks