Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    7abe4b50cd47e6dbffcae4cc0c183449

  • Size

    188KB

  • Sample

    240127-t5an3shgar

  • MD5

    7abe4b50cd47e6dbffcae4cc0c183449

  • SHA1

    ae5631ff001fffc59955e8a602ff449538970abd

  • SHA256

    af3d994d3dda02a64b6057464aeb72fdb83f9f00c6f84ccf93188ce26748415c

  • SHA512

    2af415b11a4e8c62900d7fd88bdd6c8f4fba6eec540e5f857d74130ecaacdfa09db8ab553deb43c56c585664616a91d0855931b478a88234c38f3c0bbb6ee529

  • SSDEEP

    3072:qA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoSo:qzIqATVfQeV2FZalKq6jtGJWuTmd

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443

rc4.plain
rc4.plain

Targets

    • Target

      7abe4b50cd47e6dbffcae4cc0c183449

    • Size

      188KB

    • MD5

      7abe4b50cd47e6dbffcae4cc0c183449

    • SHA1

      ae5631ff001fffc59955e8a602ff449538970abd

    • SHA256

      af3d994d3dda02a64b6057464aeb72fdb83f9f00c6f84ccf93188ce26748415c

    • SHA512

      2af415b11a4e8c62900d7fd88bdd6c8f4fba6eec540e5f857d74130ecaacdfa09db8ab553deb43c56c585664616a91d0855931b478a88234c38f3c0bbb6ee529

    • SSDEEP

      3072:qA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoSo:qzIqATVfQeV2FZalKq6jtGJWuTmd

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks