Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    b77a38acb8ddf8f4b054ba70586db6ef

  • Size

    188KB

  • Sample

    240306-qd933sbe5s

  • MD5

    b77a38acb8ddf8f4b054ba70586db6ef

  • SHA1

    180b10e3ac49f975d9eb75e7217c7df04f6d5ab8

  • SHA256

    2d7c2380d34bdab22b128eb1167cf5f381d8a532ce25b33550a5e8023e4ffc16

  • SHA512

    ca4df38c048f68645a71110c038decb560c3c07f094c86f4ab656234edff1871146168f594bdbbd0442080826c160297223e67cef938330968d62f7b81f08f26

  • SSDEEP

    3072:4sA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAo/o:4szIqATVfQeV2FZalKq6jtGJWuTmd

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443

rc4.plain
rc4.plain

Targets

    • Target

      b77a38acb8ddf8f4b054ba70586db6ef

    • Size

      188KB

    • MD5

      b77a38acb8ddf8f4b054ba70586db6ef

    • SHA1

      180b10e3ac49f975d9eb75e7217c7df04f6d5ab8

    • SHA256

      2d7c2380d34bdab22b128eb1167cf5f381d8a532ce25b33550a5e8023e4ffc16

    • SHA512

      ca4df38c048f68645a71110c038decb560c3c07f094c86f4ab656234edff1871146168f594bdbbd0442080826c160297223e67cef938330968d62f7b81f08f26

    • SSDEEP

      3072:4sA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAo/o:4szIqATVfQeV2FZalKq6jtGJWuTmd

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks