Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

JaffaCakes...c8.dll

windows7-x64

10

JaffaCakes...c8.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_51d7987eeecc145338b692e66310704ad4985765ae9fb7382df9ac675114c1c8

  • Size

    184KB

  • Sample

    241225-elg7gsxmhl

  • MD5

    2e4932d9adf1be9975f04d567704835b

  • SHA1

    04d63af724c01f1f010f96e675d63f219c89b949

  • SHA256

    51d7987eeecc145338b692e66310704ad4985765ae9fb7382df9ac675114c1c8

  • SHA512

    eb1d6adb18817476c804ba3c14a8455c1e52aea83e51c52a608dd14de96fb305c2982401f94a56326f4b27afc55b9a37bbc3201f31aafd7677f4014bc9b8f789

  • SSDEEP

    3072:WiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaovlzoxss7:WiLVCIT4WK2z1W+CUHZj4Skq/eaotoC

Score
10/10
dridex22202botnetdiscoveryloader

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723
rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_51d7987eeecc145338b692e66310704ad4985765ae9fb7382df9ac675114c1c8

    • Size

      184KB

    • MD5

      2e4932d9adf1be9975f04d567704835b

    • SHA1

      04d63af724c01f1f010f96e675d63f219c89b949

    • SHA256

      51d7987eeecc145338b692e66310704ad4985765ae9fb7382df9ac675114c1c8

    • SHA512

      eb1d6adb18817476c804ba3c14a8455c1e52aea83e51c52a608dd14de96fb305c2982401f94a56326f4b27afc55b9a37bbc3201f31aafd7677f4014bc9b8f789

    • SSDEEP

      3072:WiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaovlzoxss7:WiLVCIT4WK2z1W+CUHZj4Skq/eaotoC

    Score
    10/10
    dridex22202botnetdiscoveryloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex family

      dridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks