Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    JaffaCakes118_20916e32fa7b0dc067ca6d006858e8b157722b3a7a4b49477561ff9f0cfd7cf9

  • Size

    161KB

  • Sample

    241225-d1h7nawnex

  • MD5

    e61ddb242c8dcd5e5964873151bbcfd9

  • SHA1

    07b984087c60b06e3de526852056eb15815ae65b

  • SHA256

    20916e32fa7b0dc067ca6d006858e8b157722b3a7a4b49477561ff9f0cfd7cf9

  • SHA512

    3d45c1e0bd648d459b413952be41976903a0f7ab0e161f803acaae60afea9da69c50bcb4a34cf1e73b62a511ca5d30f2254dc1bc59fd5d34c57c5562cb1f5fb1

  • SSDEEP

    3072:9oSuywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd2aGkFY:mnS62Fl+pkeJl3CvRStrFl+EYn

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

78.46.73.125:443

185.148.168.26:2303

66.113.160.126:8172

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_20916e32fa7b0dc067ca6d006858e8b157722b3a7a4b49477561ff9f0cfd7cf9

    • Size

      161KB

    • MD5

      e61ddb242c8dcd5e5964873151bbcfd9

    • SHA1

      07b984087c60b06e3de526852056eb15815ae65b

    • SHA256

      20916e32fa7b0dc067ca6d006858e8b157722b3a7a4b49477561ff9f0cfd7cf9

    • SHA512

      3d45c1e0bd648d459b413952be41976903a0f7ab0e161f803acaae60afea9da69c50bcb4a34cf1e73b62a511ca5d30f2254dc1bc59fd5d34c57c5562cb1f5fb1

    • SSDEEP

      3072:9oSuywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd2aGkFY:mnS62Fl+pkeJl3CvRStrFl+EYn

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks