Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    JaffaCakes118_41855fbafc23bd03e53ae175ca4a3f7dc31c1414f1f95c4ce8c812e8aff3b9bb

  • Size

    170KB

  • Sample

    241230-2kyjeasker

  • MD5

    871452ddc2b029c74d5f048c9adbb6fd

  • SHA1

    c652d6970be07135aa68cb9d94b78697d23d913a

  • SHA256

    41855fbafc23bd03e53ae175ca4a3f7dc31c1414f1f95c4ce8c812e8aff3b9bb

  • SHA512

    9fbc72dd2ed0c5a840b7e0c2f264361c561ff045d7b59c7804ff4b48c677778c3a628e42097c4a81ea30058a8188f41065dcb8934b70b611f21ed2c144fe4514

  • SSDEEP

    3072:FqWLBTrGNr0gl+CI3bc4ThMXu6GkqFmLqmjcRVmkHkKFhG2wwUJ5/lB:LVqNd+CIQHXu9VFmu0qU2CJ5

Malware Config

Extracted

Family

dridex

Botnet

40112

C2

128.199.200.38:443

192.163.233.216:6601

43.229.206.244:4125

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_41855fbafc23bd03e53ae175ca4a3f7dc31c1414f1f95c4ce8c812e8aff3b9bb

    • Size

      170KB

    • MD5

      871452ddc2b029c74d5f048c9adbb6fd

    • SHA1

      c652d6970be07135aa68cb9d94b78697d23d913a

    • SHA256

      41855fbafc23bd03e53ae175ca4a3f7dc31c1414f1f95c4ce8c812e8aff3b9bb

    • SHA512

      9fbc72dd2ed0c5a840b7e0c2f264361c561ff045d7b59c7804ff4b48c677778c3a628e42097c4a81ea30058a8188f41065dcb8934b70b611f21ed2c144fe4514

    • SSDEEP

      3072:FqWLBTrGNr0gl+CI3bc4ThMXu6GkqFmLqmjcRVmkHkKFhG2wwUJ5/lB:LVqNd+CIQHXu9VFmu0qU2CJ5

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks