Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    8bd8b1509e108851cda3ef8e94bf38a0

  • Size

    188KB

  • Sample

    240203-j58k1afbgk

  • MD5

    8bd8b1509e108851cda3ef8e94bf38a0

  • SHA1

    598a7246db1ef20744a15fcffacfa7ac45d04c98

  • SHA256

    59af29822615e0906f9198de2cf38cea9251b7d7b868cdffb287bf6e9ca68216

  • SHA512

    207d98a984e119f2cf573815d86f1e0c077f7d396f04a48aa4071ec934fd33a4a7b96fcac53bf2b4b4db133e899fb1e1ab00755cf0836ec6480b60971e969054

  • SSDEEP

    3072:yA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoRo:yzIqATVfQeV2FZalKq6jtGJWuTmd

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443

rc4.plain
rc4.plain

Targets

    • Target

      8bd8b1509e108851cda3ef8e94bf38a0

    • Size

      188KB

    • MD5

      8bd8b1509e108851cda3ef8e94bf38a0

    • SHA1

      598a7246db1ef20744a15fcffacfa7ac45d04c98

    • SHA256

      59af29822615e0906f9198de2cf38cea9251b7d7b868cdffb287bf6e9ca68216

    • SHA512

      207d98a984e119f2cf573815d86f1e0c077f7d396f04a48aa4071ec934fd33a4a7b96fcac53bf2b4b4db133e899fb1e1ab00755cf0836ec6480b60971e969054

    • SSDEEP

      3072:yA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoRo:yzIqATVfQeV2FZalKq6jtGJWuTmd

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks