Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    454a37b0c8a152abc5565e84d08078a3.exe

  • Size

    188KB

  • Sample

    240106-mpb4msfcg3

  • MD5

    454a37b0c8a152abc5565e84d08078a3

  • SHA1

    a1c2f7bbe998a13b78ee5df431ee648ead531d4a

  • SHA256

    cdee28d3d92c12744b7ae1a6e51f4b7452a51a02185965610f65527193509fca

  • SHA512

    1e2c9622dbe081ed190fe57bcd9cbb80db20fe942e8fcbc59c6ee2d514b5f9dcfd37774c343eb8b9062c4b92e1d87e73a97af209a676a640ff3300aaa744c7a3

  • SSDEEP

    3072:qH0uyjZqEpAK+Gf78TBdrXkTM5vhRg9Esf0DwvtyMpVnpA+z6tX8sxKViWN7dU:qUua/Pv7YNhRIEZDeXVpAxtMsxK

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443

rc4.plain
rc4.plain

Targets

    • Target

      454a37b0c8a152abc5565e84d08078a3.exe

    • Size

      188KB

    • MD5

      454a37b0c8a152abc5565e84d08078a3

    • SHA1

      a1c2f7bbe998a13b78ee5df431ee648ead531d4a

    • SHA256

      cdee28d3d92c12744b7ae1a6e51f4b7452a51a02185965610f65527193509fca

    • SHA512

      1e2c9622dbe081ed190fe57bcd9cbb80db20fe942e8fcbc59c6ee2d514b5f9dcfd37774c343eb8b9062c4b92e1d87e73a97af209a676a640ff3300aaa744c7a3

    • SSDEEP

      3072:qH0uyjZqEpAK+Gf78TBdrXkTM5vhRg9Esf0DwvtyMpVnpA+z6tX8sxKViWN7dU:qUua/Pv7YNhRIEZDeXVpAxtMsxK

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks