Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    JaffaCakes118_68b5e3aa90760c0c8637da052c265847f1afdcc849f4a0d300b1512c558bdd09

  • Size

    163KB

  • Sample

    241221-31mmhsvnck

  • MD5

    e28ab770d7fb7764e034512d836000b5

  • SHA1

    58bf7870eb0179ea6da64c8e3f57f64a41b26e6d

  • SHA256

    68b5e3aa90760c0c8637da052c265847f1afdcc849f4a0d300b1512c558bdd09

  • SHA512

    09775cdc7cbf47a10db33aaf4b73393e1022a4835d39ac21bc20399881cce0c5fd461a57c09b5d5a32bec4bb7b3deabcfcfd90f0b94bd65be6524a8081675691

  • SSDEEP

    3072:Mar6Ys6p54kfdo+APr0aYSbeO6aal8jeytFQTOpp2J:us4p+ADxnSO6D2cOp

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

43.229.206.212:443

82.209.17.209:8172

162.241.209.225:4125

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_68b5e3aa90760c0c8637da052c265847f1afdcc849f4a0d300b1512c558bdd09

    • Size

      163KB

    • MD5

      e28ab770d7fb7764e034512d836000b5

    • SHA1

      58bf7870eb0179ea6da64c8e3f57f64a41b26e6d

    • SHA256

      68b5e3aa90760c0c8637da052c265847f1afdcc849f4a0d300b1512c558bdd09

    • SHA512

      09775cdc7cbf47a10db33aaf4b73393e1022a4835d39ac21bc20399881cce0c5fd461a57c09b5d5a32bec4bb7b3deabcfcfd90f0b94bd65be6524a8081675691

    • SSDEEP

      3072:Mar6Ys6p54kfdo+APr0aYSbeO6aal8jeytFQTOpp2J:us4p+ADxnSO6D2cOp

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks