Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    JaffaCakes118_4d9ad7e15c344acb0ae389dcbba354e9bf800c2b99c85ffef5898d2bee4e5475

  • Size

    160KB

  • Sample

    241224-lf4a4atnfx

  • MD5

    a0b5cb7511d67f5db1e82e61a3799ab8

  • SHA1

    1853e96fb420cd5e96f75691ec881a217c96254e

  • SHA256

    4d9ad7e15c344acb0ae389dcbba354e9bf800c2b99c85ffef5898d2bee4e5475

  • SHA512

    1c4fb57e49acea38cd499a5ff75bb82145daa88d854de81d4925832f5898e41d1f9ef180812d040360506cc43646d362dfd585df08ad4246520437b86c046d9b

  • SSDEEP

    3072:2UT2d85tleLD51fC5AHYEoefukoTFMpGmj08D:wy5tAL11fNHYafoMpX

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

78.46.73.125:443

185.148.168.26:2303

66.113.160.126:8172

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_4d9ad7e15c344acb0ae389dcbba354e9bf800c2b99c85ffef5898d2bee4e5475

    • Size

      160KB

    • MD5

      a0b5cb7511d67f5db1e82e61a3799ab8

    • SHA1

      1853e96fb420cd5e96f75691ec881a217c96254e

    • SHA256

      4d9ad7e15c344acb0ae389dcbba354e9bf800c2b99c85ffef5898d2bee4e5475

    • SHA512

      1c4fb57e49acea38cd499a5ff75bb82145daa88d854de81d4925832f5898e41d1f9ef180812d040360506cc43646d362dfd585df08ad4246520437b86c046d9b

    • SSDEEP

      3072:2UT2d85tleLD51fC5AHYEoefukoTFMpGmj08D:wy5tAL11fNHYafoMpX

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

    • Checks whether UAC is enabled

MITRE ATT&CK Enterprise v15

Tasks