Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

c7990f1e72...91.dll

windows7-x64

3

c7990f1e72...91.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c7990f1e72fdfa84552f02f9d11cabb74251b0508291af5366fefcee646f9c91

  • Size

    132KB

  • MD5

    274385a8580daa9b30543d6204250280

  • SHA1

    4c5c459a7067f1177a49af80a1e44d8916706457

  • SHA256

    c7990f1e72fdfa84552f02f9d11cabb74251b0508291af5366fefcee646f9c91

  • SHA512

    b7d62a36ecd95bf04c7ee244b4ec6d51e6d9c77be02f73a463d9ee18039a8bc10cb7710862cfc74f91ef49139ff0e9bc48f3228ad071b24fb32b79814908c863

  • SSDEEP

    3072:mQPU+oMH1RYDuHlJ4R34t7Rafe6SRlQQIKf0T:mEU+o81RYDuFyRoLgxmQp

Score
10/10
botnetloader22201dridex

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.42.56.15:443

169.255.57.61:8116

128.199.192.135:6602
rc4.plain
rc4.plain

Signatures

  • Dridex Loader 1 IoCs

    Detects Dridex both x86 and x64 loader in memory.

    botnetloader
  • Dridex family
    dridex
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c7990f1e72fdfa84552f02f9d11cabb74251b0508291af5366fefcee646f9c91
    .dll regsvr32 windows:6 windows x86 arch:x86

    68b66fd5fe2322f1f5fcb9cf4ede12bd


    Headers

    Imports

    Exports

    Sections