Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

7f490bf83c...b0.dll

windows7-x64

10

7f490bf83c...b0.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7f490bf83ce3f2d56645d74c1b26b6b0

  • Size

    184KB

  • Sample

    240129-jmym3sdcb3

  • MD5

    7f490bf83ce3f2d56645d74c1b26b6b0

  • SHA1

    5f1a2e6645aba66fd1141092aaa1556e475aaf57

  • SHA256

    a03e9f1b88334a7562d6546d9716815767d14cf4ff7a1fcf194b54a00ed8f729

  • SHA512

    6005d6ded063c5669e310c46b85e22cdc6a5d1aedeb4f6c11ec0328c5479648303651ab5b974b23301d5d6f3af84d782ebec382d156766d38a9c86b97dc9d9b0

  • SSDEEP

    3072:Bhd6lp2ffOeP3gv+i4W63iFfKfXM9mQltYwgO226+f33JGVQcY:B3fOeIv54W6SFKfc9me9v9/JGV

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

51.79.50.122:443

222.124.142.67:10443

138.201.222.158:4664
rc4.plain
rc4.plain

Targets

    • Target

      7f490bf83ce3f2d56645d74c1b26b6b0

    • Size

      184KB

    • MD5

      7f490bf83ce3f2d56645d74c1b26b6b0

    • SHA1

      5f1a2e6645aba66fd1141092aaa1556e475aaf57

    • SHA256

      a03e9f1b88334a7562d6546d9716815767d14cf4ff7a1fcf194b54a00ed8f729

    • SHA512

      6005d6ded063c5669e310c46b85e22cdc6a5d1aedeb4f6c11ec0328c5479648303651ab5b974b23301d5d6f3af84d782ebec382d156766d38a9c86b97dc9d9b0

    • SSDEEP

      3072:Bhd6lp2ffOeP3gv+i4W63iFfKfXM9mQltYwgO226+f33JGVQcY:B3fOeIv54W6SFKfc9me9v9/JGV

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks