Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    JaffaCakes118_800b89bec2650c7b060ac032cdd148624700e6839a412064e83dac9bd6924c69

  • Size

    160KB

  • Sample

    241224-a58fkaxkcm

  • MD5

    1b19997b11ba786abbdf6117d10e2547

  • SHA1

    656cdb8d315d209e032f2f36933c44e3ef887062

  • SHA256

    800b89bec2650c7b060ac032cdd148624700e6839a412064e83dac9bd6924c69

  • SHA512

    1d9962b66e77cc30f8ea07b1352084bdd4550dd6c0723f72a27f2e2a80945d34b5ab61bed19137d2d4fb1020d61e1e64ba4acf4052287ac32394ad1d26066f66

  • SSDEEP

    3072:9uT2d85tleLD51fC5AHYEoefukoTFMpGmjb8D:Ly5tAL11fNHYafoMpX

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

78.46.73.125:443

185.148.168.26:2303

66.113.160.126:8172

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_800b89bec2650c7b060ac032cdd148624700e6839a412064e83dac9bd6924c69

    • Size

      160KB

    • MD5

      1b19997b11ba786abbdf6117d10e2547

    • SHA1

      656cdb8d315d209e032f2f36933c44e3ef887062

    • SHA256

      800b89bec2650c7b060ac032cdd148624700e6839a412064e83dac9bd6924c69

    • SHA512

      1d9962b66e77cc30f8ea07b1352084bdd4550dd6c0723f72a27f2e2a80945d34b5ab61bed19137d2d4fb1020d61e1e64ba4acf4052287ac32394ad1d26066f66

    • SSDEEP

      3072:9uT2d85tleLD51fC5AHYEoefukoTFMpGmjb8D:Ly5tAL11fNHYafoMpX

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

    • Checks whether UAC is enabled

MITRE ATT&CK Enterprise v15

Tasks