Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    JaffaCakes118_f33d9fb3b40cac82a7c8d32972096889b7fd63d39437fb148d6de5be5a5f1604

  • Size

    163KB

  • Sample

    241224-cv3tfazkaq

  • MD5

    47a48ea9a988201ea4345055d7e34b1a

  • SHA1

    8b4362f48fcc9aa2e10bda4466700025507cf58c

  • SHA256

    f33d9fb3b40cac82a7c8d32972096889b7fd63d39437fb148d6de5be5a5f1604

  • SHA512

    fced6c5a2796f4ae406589a87d45783bb3126139296063e62531763de873ec3c2b881373c7b149e91f5953efd144e94ac78f7784428a4682d9c88bd951f30723

  • SSDEEP

    3072:m9F/oNrQb4xVubbXP/NTccbsFvCeLmXH57V30e8Pj:m9F6rQXvFczvYpQP

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

43.229.206.212:443

82.209.17.209:8172

162.241.209.225:4125

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_f33d9fb3b40cac82a7c8d32972096889b7fd63d39437fb148d6de5be5a5f1604

    • Size

      163KB

    • MD5

      47a48ea9a988201ea4345055d7e34b1a

    • SHA1

      8b4362f48fcc9aa2e10bda4466700025507cf58c

    • SHA256

      f33d9fb3b40cac82a7c8d32972096889b7fd63d39437fb148d6de5be5a5f1604

    • SHA512

      fced6c5a2796f4ae406589a87d45783bb3126139296063e62531763de873ec3c2b881373c7b149e91f5953efd144e94ac78f7784428a4682d9c88bd951f30723

    • SSDEEP

      3072:m9F/oNrQb4xVubbXP/NTccbsFvCeLmXH57V30e8Pj:m9F6rQXvFczvYpQP

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks