Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    JaffaCakes118_7635b9f77430c730501e01a5803797887fd9702b71c0e3f3d1955acd511f97da

  • Size

    161KB

  • Sample

    241225-e14c9syjcm

  • MD5

    6fddeb5cc095a564aac3b7b6e5bfaf40

  • SHA1

    13efc029f9322c4a3c0b9ebbb8186e7f61d24d62

  • SHA256

    7635b9f77430c730501e01a5803797887fd9702b71c0e3f3d1955acd511f97da

  • SHA512

    d9b6389686404e32adaca0d8fa840561cd355e698eda3982ce91543f594c502cc6b7c46d3cc548649f932270a2e7983c413423ca558f92577f4b29b4e84aeae8

  • SSDEEP

    3072:GaSuywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd2BGkFY:znS62Fl+pkeJl3CvRStrFl+EYE

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

78.46.73.125:443

185.148.168.26:2303

66.113.160.126:8172

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_7635b9f77430c730501e01a5803797887fd9702b71c0e3f3d1955acd511f97da

    • Size

      161KB

    • MD5

      6fddeb5cc095a564aac3b7b6e5bfaf40

    • SHA1

      13efc029f9322c4a3c0b9ebbb8186e7f61d24d62

    • SHA256

      7635b9f77430c730501e01a5803797887fd9702b71c0e3f3d1955acd511f97da

    • SHA512

      d9b6389686404e32adaca0d8fa840561cd355e698eda3982ce91543f594c502cc6b7c46d3cc548649f932270a2e7983c413423ca558f92577f4b29b4e84aeae8

    • SSDEEP

      3072:GaSuywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd2BGkFY:znS62Fl+pkeJl3CvRStrFl+EYE

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks