Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    JaffaCakes118_ee307b6867934b39587e8c5f0ebbae55974ce510842f8f3c25e20fe476189ff6

  • Size

    161KB

  • Sample

    241224-cakgcsykfx

  • MD5

    e6ccf6be59f68983b69ca7d29c73a7af

  • SHA1

    63559943a66775dde1f5cb37028e3cd06f7529a0

  • SHA256

    ee307b6867934b39587e8c5f0ebbae55974ce510842f8f3c25e20fe476189ff6

  • SHA512

    21dd49b2ae30dbbb45ef5993a2a3c5d34de1e61e0f7d2b1da36fa8a95c3dc4e619b1d4db4cc2c95f3e29307e231e48c87038c68d4402ba3ef4896983bb252a3a

  • SSDEEP

    3072:dx45bscWrhftr4SOX63M5jY17lh9sDVj9a/KBz9YlYU:n4KcMhVkbK3hDq9E8i

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

45.55.134.126:443

67.207.83.96:8172

193.160.214.95:4125

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_ee307b6867934b39587e8c5f0ebbae55974ce510842f8f3c25e20fe476189ff6

    • Size

      161KB

    • MD5

      e6ccf6be59f68983b69ca7d29c73a7af

    • SHA1

      63559943a66775dde1f5cb37028e3cd06f7529a0

    • SHA256

      ee307b6867934b39587e8c5f0ebbae55974ce510842f8f3c25e20fe476189ff6

    • SHA512

      21dd49b2ae30dbbb45ef5993a2a3c5d34de1e61e0f7d2b1da36fa8a95c3dc4e619b1d4db4cc2c95f3e29307e231e48c87038c68d4402ba3ef4896983bb252a3a

    • SSDEEP

      3072:dx45bscWrhftr4SOX63M5jY17lh9sDVj9a/KBz9YlYU:n4KcMhVkbK3hDq9E8i

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks