Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    JaffaCakes118_e5849fb7ed7faa5b2bd04928f3c183c94786fa3970d09e9d37976e7e55a55f85

  • Size

    184KB

  • Sample

    241224-dj82ra1jbk

  • MD5

    d2a732f2d6ff84501278365271d134b1

  • SHA1

    b423df43c05e04676cb88007e048b39c0a76d2f9

  • SHA256

    e5849fb7ed7faa5b2bd04928f3c183c94786fa3970d09e9d37976e7e55a55f85

  • SHA512

    dbc8456b457fd8183e8701a138b4decd2e5aa15366ebd4e013abce9d76beae4a2cbf1d7a30ed66bcbb3d1bc7db9dfb2c3f9c6c665428e7a030f99be4b1b4cb7b

  • SSDEEP

    3072:dJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8JGa//2uFrSc:mfYOX+wTScR/Xzku9LVwpuG

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
1
XH2KyJtcJ7RSk5n0Ak2zUIsoefdhHZlKRYf
rc4.plain
1
cYEsjNtMnqhfNdGdtxJHObrdyxC7I2RsYqPuLirrwkWgKf0csGFj3Ow4lgY2bwEnd8mTqve

Targets

    • Target

      JaffaCakes118_e5849fb7ed7faa5b2bd04928f3c183c94786fa3970d09e9d37976e7e55a55f85

    • Size

      184KB

    • MD5

      d2a732f2d6ff84501278365271d134b1

    • SHA1

      b423df43c05e04676cb88007e048b39c0a76d2f9

    • SHA256

      e5849fb7ed7faa5b2bd04928f3c183c94786fa3970d09e9d37976e7e55a55f85

    • SHA512

      dbc8456b457fd8183e8701a138b4decd2e5aa15366ebd4e013abce9d76beae4a2cbf1d7a30ed66bcbb3d1bc7db9dfb2c3f9c6c665428e7a030f99be4b1b4cb7b

    • SSDEEP

      3072:dJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8JGa//2uFrSc:mfYOX+wTScR/Xzku9LVwpuG

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.