Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    JaffaCakes118_1774bb1740936a9e474103477de40d9684ea85bc649150c49fd65010dd521b9d

  • Size

    184KB

  • Sample

    241225-v5y74s1jej

  • MD5

    90bbb3292f4869861ee49d35b3dfe69b

  • SHA1

    17fa514d148e0bf39c44d79491aca2ebc3b4e58f

  • SHA256

    1774bb1740936a9e474103477de40d9684ea85bc649150c49fd65010dd521b9d

  • SHA512

    821468887010330c4267a0de1c2ff98b8b72dfef339c702fc37c5db20be7b59fe34a8577353e592700fcec13535c8a4f40ea1991667cea586663912bf8cb745b

  • SSDEEP

    3072:p5qG2Il+j3NAjMqgNzNC/SDBd5EUI7je2bEKhkCetXkLe08zwiL6Z2v:pgG9l+j3xvqDpEsQkiL6Z

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

103.75.201.2:443

158.223.1.108:6225

165.22.28.242:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_1774bb1740936a9e474103477de40d9684ea85bc649150c49fd65010dd521b9d

    • Size

      184KB

    • MD5

      90bbb3292f4869861ee49d35b3dfe69b

    • SHA1

      17fa514d148e0bf39c44d79491aca2ebc3b4e58f

    • SHA256

      1774bb1740936a9e474103477de40d9684ea85bc649150c49fd65010dd521b9d

    • SHA512

      821468887010330c4267a0de1c2ff98b8b72dfef339c702fc37c5db20be7b59fe34a8577353e592700fcec13535c8a4f40ea1991667cea586663912bf8cb745b

    • SSDEEP

      3072:p5qG2Il+j3NAjMqgNzNC/SDBd5EUI7je2bEKhkCetXkLe08zwiL6Z2v:pgG9l+j3xvqDpEsQkiL6Z

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks