Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    JaffaCakes118_77fd00f3265b9ad686429a14fd99b6d84c2b60d70a0e4106f50fbb8e2cd9c158

  • Size

    184KB

  • Sample

    241229-bl5q1axpbx

  • MD5

    57cf2e7928f0615ae183ec1461175516

  • SHA1

    93e5f746ddd60ac67be9f6b3f07f8355e231ac20

  • SHA256

    77fd00f3265b9ad686429a14fd99b6d84c2b60d70a0e4106f50fbb8e2cd9c158

  • SHA512

    bf168614ccf6bc67d64ddb4457ce564e42b993324453083af2b00cf02fae9ec2684708fd998cba0deaf98e5899d26160e0be8111de782d23dcc36635b31b1eff

  • SSDEEP

    3072:/uwfhNXphcqs2tJYsoa9Xibolk0CtPBU1jhhF8ZJ8fDo4KLlmsb:F7TXYsd9SkONU1jKGl0lm

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

103.75.201.2:443

158.223.1.108:6225

165.22.28.242:4664

rc4.plain
1
KaFOTWRMoR1YwIux5lF0nBwfe5be1tbuvd
rc4.plain
1
pwkVaLbtFZkgN4nLmGG0vVqz6CQyUtA5oqhHMj5b0cTIa3nmHkMqnbRc2gStXfGgLuSiCV6Q

Targets

    • Target

      JaffaCakes118_77fd00f3265b9ad686429a14fd99b6d84c2b60d70a0e4106f50fbb8e2cd9c158

    • Size

      184KB

    • MD5

      57cf2e7928f0615ae183ec1461175516

    • SHA1

      93e5f746ddd60ac67be9f6b3f07f8355e231ac20

    • SHA256

      77fd00f3265b9ad686429a14fd99b6d84c2b60d70a0e4106f50fbb8e2cd9c158

    • SHA512

      bf168614ccf6bc67d64ddb4457ce564e42b993324453083af2b00cf02fae9ec2684708fd998cba0deaf98e5899d26160e0be8111de782d23dcc36635b31b1eff

    • SSDEEP

      3072:/uwfhNXphcqs2tJYsoa9Xibolk0CtPBU1jhhF8ZJ8fDo4KLlmsb:F7TXYsd9SkONU1jKGl0lm

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.