Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    JaffaCakes118_20f6cded20d334a2e9b0c57c26235e792d3a86993d071542d7f466f1e088357b

  • Size

    188KB

  • Sample

    241224-dvemaa1lck

  • MD5

    67b70d290b815ae90c6c7344f72d861d

  • SHA1

    fa11c880dcd474340250eaac1d0e27a11bc266ba

  • SHA256

    20f6cded20d334a2e9b0c57c26235e792d3a86993d071542d7f466f1e088357b

  • SHA512

    7e51d1f9086fc9c1dbe88acd1bd3feec8141dd9a1518838fe200578f936272104b472870a568faa67999971576722374345049eb1a2d7e03b669c8ff7d44bdd5

  • SSDEEP

    3072:dteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzQ9qM:pq7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
1
O8gS34J9YSWjLHlls2UUrobOVwkv2gxcuQGDftg29
rc4.plain
1
uKMtcv1AqGZruPo9ospRTBws8THw75AMb8FgkX5O4e9TcekeUYyEZPcdBYFbpQD81

Targets

    • Target

      JaffaCakes118_20f6cded20d334a2e9b0c57c26235e792d3a86993d071542d7f466f1e088357b

    • Size

      188KB

    • MD5

      67b70d290b815ae90c6c7344f72d861d

    • SHA1

      fa11c880dcd474340250eaac1d0e27a11bc266ba

    • SHA256

      20f6cded20d334a2e9b0c57c26235e792d3a86993d071542d7f466f1e088357b

    • SHA512

      7e51d1f9086fc9c1dbe88acd1bd3feec8141dd9a1518838fe200578f936272104b472870a568faa67999971576722374345049eb1a2d7e03b669c8ff7d44bdd5

    • SSDEEP

      3072:dteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzQ9qM:pq7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.