Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    JaffaCakes118_f305709fc149602284f68443498c672dc4b1c6a49279bb04fed0d21de2b6a7f4

  • Size

    166KB

  • Sample

    241225-ysfrsavqhz

  • MD5

    2d228761827ab6f88ae2f89ec35b7338

  • SHA1

    ac92ca698e1108828b09a12eb0f7227e66a038fc

  • SHA256

    f305709fc149602284f68443498c672dc4b1c6a49279bb04fed0d21de2b6a7f4

  • SHA512

    fbc3431cb04447ee362cfce1f02bc6d7221b2088ee8ddad7019582de3e7eda21513a3b8f88ace4035e90475a0e4cfbf9b8db9b4ce8205f9056f024258782ccd2

  • SSDEEP

    3072:/uFbQtsYQcjxanytIp92/l1iPPqs1/whG68DaHrnpDZ+qa:/0czbty9uiaJlva

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

131.100.24.202:443

193.160.214.95:4125

67.43.4.76:8172

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_f305709fc149602284f68443498c672dc4b1c6a49279bb04fed0d21de2b6a7f4

    • Size

      166KB

    • MD5

      2d228761827ab6f88ae2f89ec35b7338

    • SHA1

      ac92ca698e1108828b09a12eb0f7227e66a038fc

    • SHA256

      f305709fc149602284f68443498c672dc4b1c6a49279bb04fed0d21de2b6a7f4

    • SHA512

      fbc3431cb04447ee362cfce1f02bc6d7221b2088ee8ddad7019582de3e7eda21513a3b8f88ace4035e90475a0e4cfbf9b8db9b4ce8205f9056f024258782ccd2

    • SSDEEP

      3072:/uFbQtsYQcjxanytIp92/l1iPPqs1/whG68DaHrnpDZ+qa:/0czbty9uiaJlva

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks