Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    5bd2e1697653e78672678a5f05d2933ea2058356ac223e824ad10490be13c644N.exe

  • Size

    188KB

  • Sample

    250104-c7a9ysxkgz

  • MD5

    84b958e1458fb86e152020b94b5afc10

  • SHA1

    1f59b5b6828a1f4d54f155dd4ae8393e5a7e58dc

  • SHA256

    5bd2e1697653e78672678a5f05d2933ea2058356ac223e824ad10490be13c644

  • SHA512

    ef33a512eb599ef19cee319ae0490bbff64dfd71b27c4cf56524e9fabafee89c3c0bf483e31bec1362d2f29720365c6b29cbdb9a96de4b5aec41ad0aa57d4d79

  • SSDEEP

    3072:8A8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoso:8zIqATVfQeV2FZalKq6jtGJWuTmd

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443

rc4.plain
rc4.plain

Targets

    • Target

      5bd2e1697653e78672678a5f05d2933ea2058356ac223e824ad10490be13c644N.exe

    • Size

      188KB

    • MD5

      84b958e1458fb86e152020b94b5afc10

    • SHA1

      1f59b5b6828a1f4d54f155dd4ae8393e5a7e58dc

    • SHA256

      5bd2e1697653e78672678a5f05d2933ea2058356ac223e824ad10490be13c644

    • SHA512

      ef33a512eb599ef19cee319ae0490bbff64dfd71b27c4cf56524e9fabafee89c3c0bf483e31bec1362d2f29720365c6b29cbdb9a96de4b5aec41ad0aa57d4d79

    • SSDEEP

      3072:8A8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoso:8zIqATVfQeV2FZalKq6jtGJWuTmd

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks