Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

JaffaCakes...cd.dll

windows7-x64

10

JaffaCakes...cd.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_5a8c24e3f932a14a33efccd66b28daa0ec7682f6824f8aaee099303364baafcd

  • Size

    184KB

  • Sample

    241221-2vyxxsspby

  • MD5

    7f98b485743d4425ed4bb8e176ee80db

  • SHA1

    73406c53da865edd4c2877e64868bac445594ef0

  • SHA256

    5a8c24e3f932a14a33efccd66b28daa0ec7682f6824f8aaee099303364baafcd

  • SHA512

    f7532aeab4d1b4a80228d58a2322f393e6c3c0b0864966ce56b18c14d8adcc0df31472b262006a3696584f4855888b959a4fa41224399bba5ac0a5a9d2a7cae1

  • SSDEEP

    3072:KiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoWlzoxss7:KiLVCIT4WK2z1W+CUHZj4Skq/eaoEoC

Score
10/10
dridex22202botnetdiscoveryloader

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723
rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_5a8c24e3f932a14a33efccd66b28daa0ec7682f6824f8aaee099303364baafcd

    • Size

      184KB

    • MD5

      7f98b485743d4425ed4bb8e176ee80db

    • SHA1

      73406c53da865edd4c2877e64868bac445594ef0

    • SHA256

      5a8c24e3f932a14a33efccd66b28daa0ec7682f6824f8aaee099303364baafcd

    • SHA512

      f7532aeab4d1b4a80228d58a2322f393e6c3c0b0864966ce56b18c14d8adcc0df31472b262006a3696584f4855888b959a4fa41224399bba5ac0a5a9d2a7cae1

    • SSDEEP

      3072:KiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoWlzoxss7:KiLVCIT4WK2z1W+CUHZj4Skq/eaoEoC

    Score
    10/10
    dridex22202botnetdiscoveryloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex family

      dridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks