Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

JaffaCakes...22.dll

windows7-x64

10

JaffaCakes...22.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_a91a5394a51aaa5a9e0182425f98ca133ee5d52edd3d11a3651719016956f622

  • Size

    184KB

  • Sample

    241222-gq63hswpht

  • MD5

    b62fbc0256e8bdf0685051e7e9d6481d

  • SHA1

    55c1e429cffc135c6b26e1f2ced572910530d10c

  • SHA256

    a91a5394a51aaa5a9e0182425f98ca133ee5d52edd3d11a3651719016956f622

  • SHA512

    9c479975c283052f23f8484456580e99863f3cc4e37aad7f8bbf38ca0bb5b28a35bcf667bc555d2937c3892660caab69aa2a16c6a6811e784f301a0cb9c33c97

  • SSDEEP

    3072:5uwfhNXphcqs2tJYsoa9Xibolk0CtPBU1jhhF8ZJ8fDo4Khlmsb:z7TXYsd9SkONU1jKGlOlm

Score
10/10
dridex22202botnetdiscoveryloader

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

103.75.201.2:443

158.223.1.108:6225

165.22.28.242:4664
rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_a91a5394a51aaa5a9e0182425f98ca133ee5d52edd3d11a3651719016956f622

    • Size

      184KB

    • MD5

      b62fbc0256e8bdf0685051e7e9d6481d

    • SHA1

      55c1e429cffc135c6b26e1f2ced572910530d10c

    • SHA256

      a91a5394a51aaa5a9e0182425f98ca133ee5d52edd3d11a3651719016956f622

    • SHA512

      9c479975c283052f23f8484456580e99863f3cc4e37aad7f8bbf38ca0bb5b28a35bcf667bc555d2937c3892660caab69aa2a16c6a6811e784f301a0cb9c33c97

    • SSDEEP

      3072:5uwfhNXphcqs2tJYsoa9Xibolk0CtPBU1jhhF8ZJ8fDo4Khlmsb:z7TXYsd9SkONU1jKGlOlm

    Score
    10/10
    dridex22202botnetdiscoveryloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex family

      dridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks