Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

8b839bb135...85.dll

windows7-x64

10

8b839bb135...85.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8b839bb135e3607285fd75d88a81b685

  • Size

    184KB

  • Sample

    231222-pgzwvaaadn

  • MD5

    8b839bb135e3607285fd75d88a81b685

  • SHA1

    44c73771d612639ef6d24f7f666f51338c95a439

  • SHA256

    735cc85ea368f4ed7f5331bb0d744e280bdee4f2bbf961239b3440106edc54a8

  • SHA512

    fae210df4452af2610bceda1547c8ea09d8fe862bf081c88772c3a670e2a7de66fb238dc258a9a6cba34101b7f27ba48479a118b4d0eb8f0b4b4ff30f58fdac8

  • SSDEEP

    3072:dgkQz1PuOprc+kq6VNOe3qbarVEpZlcbBacS9nOdgRdA4l:sPFkq6zOe5ilSanOCd

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.75.201.2:443

158.223.1.108:6225

165.22.28.242:4664
rc4.plain
rc4.plain

Targets

    • Target

      8b839bb135e3607285fd75d88a81b685

    • Size

      184KB

    • MD5

      8b839bb135e3607285fd75d88a81b685

    • SHA1

      44c73771d612639ef6d24f7f666f51338c95a439

    • SHA256

      735cc85ea368f4ed7f5331bb0d744e280bdee4f2bbf961239b3440106edc54a8

    • SHA512

      fae210df4452af2610bceda1547c8ea09d8fe862bf081c88772c3a670e2a7de66fb238dc258a9a6cba34101b7f27ba48479a118b4d0eb8f0b4b4ff30f58fdac8

    • SSDEEP

      3072:dgkQz1PuOprc+kq6VNOe3qbarVEpZlcbBacS9nOdgRdA4l:sPFkq6zOe5ilSanOCd

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks