Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    JaffaCakes118_e57b4deee1db0c10ec34de63a9fce6a3e46514df35b3b92fb65f11b214fbb0bf

  • Size

    171KB

  • Sample

    241224-ba1ynsxjhx

  • MD5

    dc4869ca630c4bbd81daa2ea377702ed

  • SHA1

    cfc0d783af50607fb5a3ce9f74cd34103d3d3484

  • SHA256

    e57b4deee1db0c10ec34de63a9fce6a3e46514df35b3b92fb65f11b214fbb0bf

  • SHA512

    ea5e0f21e16c31319a03305858124d8785d283ad8221629d6bd5e1e4da818f3bf06addaa18cb745b2fdad42984c27e52956c7acc61a8003ec6dabe0a61474e4d

  • SSDEEP

    3072:gi49mEb06hs9BPEmmvt7dNbTqub9Un7WpVJBR13LSoAH7Dk0ZT:gH9RVaPEmsdHdbQUbd2H3

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

128.199.200.38:443

192.163.233.216:6601

43.229.206.244:4125

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_e57b4deee1db0c10ec34de63a9fce6a3e46514df35b3b92fb65f11b214fbb0bf

    • Size

      171KB

    • MD5

      dc4869ca630c4bbd81daa2ea377702ed

    • SHA1

      cfc0d783af50607fb5a3ce9f74cd34103d3d3484

    • SHA256

      e57b4deee1db0c10ec34de63a9fce6a3e46514df35b3b92fb65f11b214fbb0bf

    • SHA512

      ea5e0f21e16c31319a03305858124d8785d283ad8221629d6bd5e1e4da818f3bf06addaa18cb745b2fdad42984c27e52956c7acc61a8003ec6dabe0a61474e4d

    • SSDEEP

      3072:gi49mEb06hs9BPEmmvt7dNbTqub9Un7WpVJBR13LSoAH7Dk0ZT:gH9RVaPEmsdHdbQUbd2H3

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks