Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
120s -
max time network
16s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
16/01/2025, 07:17
General
-
Target
c3145f16d37201bdfee03157468b384c9c6d606a0fde36b620d6ce614fe76281N.exe
-
Size
365KB
-
MD5
f2fdbfa4d88aa244122c85bea4df0600
-
SHA1
5dded234f1dc103248a39cb16461ad60ce3dfae9
-
SHA256
c3145f16d37201bdfee03157468b384c9c6d606a0fde36b620d6ce614fe76281
-
SHA512
c1f89d2358da24667ac1450837a9f78c2b50455cddb48dd388e80bdddc48972df3ed28fb7d80d02c361863a923ddd8bd741f650240728af53ca9975ecc95548f
-
SSDEEP
3072:BdOb5g2mc06HSamn/2AWbwvpS1IVrVOZHBvskLyAITytApFUKjbobZY:yFRmc06yamHgIchvlWAI5pFVH8Z
Score
10/10
Malware Config
Extracted
Family
dridex
C2
94.130.66.61:691
192.232.207.243:8443
185.10.202.137:1443
88.217.172.79:3386
Signatures
-
Dridex
Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.
-
Dridex family
-
Suspicious use of UnmapMainImage 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\c3145f16d37201bdfee03157468b384c9c6d606a0fde36b620d6ce614fe76281N.exe"C:\Users\Admin\AppData\Local\Temp\c3145f16d37201bdfee03157468b384c9c6d606a0fde36b620d6ce614fe76281N.exe"1⤵
- Suspicious use of UnmapMainImage
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
152KB
-
Filesize
116KB
-
Filesize
152KB