Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    ea30222df47596649901a0e6c4f0f8c2_JaffaCakes118

  • Size

    1.1MB

  • Sample

    240409-rqptcahd26

  • MD5

    ea30222df47596649901a0e6c4f0f8c2

  • SHA1

    69fd28af4a424fb023cd5eb9369788a66207d347

  • SHA256

    13a0c05dd4f7e469240ea0d791589e829f8648b1bc7fde8a376187beced129f5

  • SHA512

    3adcf4eabf6d4bcb6cdf0bec3409a12c34ff8977340a630ee210659e02d262eb4b7529ce0493da2fcc13e43985883252c7814e80b66dc4067fcd1f98354f1a44

  • SSDEEP

    12288:lM+ZdkmHubeaCo6TRg522A/sUQBJ8Wvp:lMcpTo6a00BOa

Malware Config

Extracted

Family

dridex

Botnet

10111

C2

176.9.89.122:10172

147.91.31.1:6225

103.30.247.115:7443

rc4.plain
rc4.plain

Targets

    • Target

      ea30222df47596649901a0e6c4f0f8c2_JaffaCakes118

    • Size

      1.1MB

    • MD5

      ea30222df47596649901a0e6c4f0f8c2

    • SHA1

      69fd28af4a424fb023cd5eb9369788a66207d347

    • SHA256

      13a0c05dd4f7e469240ea0d791589e829f8648b1bc7fde8a376187beced129f5

    • SHA512

      3adcf4eabf6d4bcb6cdf0bec3409a12c34ff8977340a630ee210659e02d262eb4b7529ce0493da2fcc13e43985883252c7814e80b66dc4067fcd1f98354f1a44

    • SSDEEP

      12288:lM+ZdkmHubeaCo6TRg522A/sUQBJ8Wvp:lMcpTo6a00BOa

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Checks whether UAC is enabled

MITRE ATT&CK Enterprise v15

Tasks