Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
51s -
max time network
16s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
02/02/2025, 06:30
General
-
Target
dc2d440c9ecce953abaf1f2d4b90e3b17aed213fea4313c718c341567fb1c0e7N.exe
-
Size
787KB
-
MD5
545375df31d96329f9839c975ed57660
-
SHA1
6be4ea38e1d9f21feaa85fc6a50e7719093e9c43
-
SHA256
dc2d440c9ecce953abaf1f2d4b90e3b17aed213fea4313c718c341567fb1c0e7
-
SHA512
9829668d6cb9ac7efe21222dbe4c7491890e9286824f8b27da85f1d2d7fb820357f8656cef3345e2624e0971e32defec95baef5d16cd3322a052ccd448ab7af9
-
SSDEEP
6144:dmmO19e3qlOslMkn0an0D/jwsi5iC3Aip5ui8eYRKM1+ZpvpQKv+fFLXF2py4n0G:ENLPHLiHipGoM1D2+fBybnf
Score
10/10
Malware Config
Extracted
Family
dridex
Botnet
10111
C2
217.20.166.177:443
54.38.143.246:691
92.38.128.47:3389
rc4.plain
rc4.plain
Signatures
-
Dridex
Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.
-
Dridex family
-
Dridex Loader 'dmod' strings 2 IoCs
Detects 'dmod' strings in Dridex loader.
Processes
-
C:\Users\Admin\AppData\Local\Temp\dc2d440c9ecce953abaf1f2d4b90e3b17aed213fea4313c718c341567fb1c0e7N.exe"C:\Users\Admin\AppData\Local\Temp\dc2d440c9ecce953abaf1f2d4b90e3b17aed213fea4313c718c341567fb1c0e7N.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
176KB
-
Filesize
172KB
-
Filesize
800KB