Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

c93ab6a507...19.dll

windows7-x64

10

c93ab6a507...19.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c93ab6a507b626cff133abae4d2d1ae4c948e109130739db2faadfe3cb401619

  • Size

    184KB

  • Sample

    241221-tvh8gasrcp

  • MD5

    505ec469b20e8333be32e0427c738989

  • SHA1

    accbfa765b9b439bbbb6d88c1e68478cbba73aa3

  • SHA256

    c93ab6a507b626cff133abae4d2d1ae4c948e109130739db2faadfe3cb401619

  • SHA512

    9b260e4e89459b5c674ab02bfbd48a6d4e5f7f4408a3d7c26b3e80ba5a175521b4c4975836a8cd756361519b8b895380daca8fc3acadabc3a22ed70df2dc1bdf

  • SSDEEP

    3072:WiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoClzoxss7:WiLVCIT4WK2z1W+CUHZj4Skq/eaoooC

Score
10/10
dridex22202botnetdiscoveryloader

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723
rc4.plain
rc4.plain

Targets

    • Target

      c93ab6a507b626cff133abae4d2d1ae4c948e109130739db2faadfe3cb401619

    • Size

      184KB

    • MD5

      505ec469b20e8333be32e0427c738989

    • SHA1

      accbfa765b9b439bbbb6d88c1e68478cbba73aa3

    • SHA256

      c93ab6a507b626cff133abae4d2d1ae4c948e109130739db2faadfe3cb401619

    • SHA512

      9b260e4e89459b5c674ab02bfbd48a6d4e5f7f4408a3d7c26b3e80ba5a175521b4c4975836a8cd756361519b8b895380daca8fc3acadabc3a22ed70df2dc1bdf

    • SSDEEP

      3072:WiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoClzoxss7:WiLVCIT4WK2z1W+CUHZj4Skq/eaoooC

    Score
    10/10
    dridex22202botnetdiscoveryloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex family

      dridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks