Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

25e7a624c9...98.dll

windows7-x64

10

25e7a624c9...98.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    25e7a624c9eb09610ad25616c1c7c798

  • Size

    184KB

  • Sample

    231231-dp2vmahde6

  • MD5

    25e7a624c9eb09610ad25616c1c7c798

  • SHA1

    2463ee1f21249045630ef91617c017fef8e363e1

  • SHA256

    425f2a98152c333d3e19509080079a1d665a4452b8bfa3407f51c9fad7a9bd9e

  • SHA512

    0fdec668f4e8d42f8b9ad82de3bac299f78f4d41f44dd3387ea40513468d62506dcb890c32a7e3e47494f2a516a8a60f3d7a9100e438c2d759c7dac1e8a2b98f

  • SSDEEP

    3072:whd6lp2ffOeP3gv+i4W63iFfKfXM9mQltYwgO226+f33JLVQcY:w3fOeIv54W6SFKfc9me9v9/JLV

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

51.79.50.122:443

222.124.142.67:10443

138.201.222.158:4664
rc4.plain
rc4.plain

Targets

    • Target

      25e7a624c9eb09610ad25616c1c7c798

    • Size

      184KB

    • MD5

      25e7a624c9eb09610ad25616c1c7c798

    • SHA1

      2463ee1f21249045630ef91617c017fef8e363e1

    • SHA256

      425f2a98152c333d3e19509080079a1d665a4452b8bfa3407f51c9fad7a9bd9e

    • SHA512

      0fdec668f4e8d42f8b9ad82de3bac299f78f4d41f44dd3387ea40513468d62506dcb890c32a7e3e47494f2a516a8a60f3d7a9100e438c2d759c7dac1e8a2b98f

    • SSDEEP

      3072:whd6lp2ffOeP3gv+i4W63iFfKfXM9mQltYwgO226+f33JLVQcY:w3fOeIv54W6SFKfc9me9v9/JLV

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks