Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    JaffaCakes118_b7fc96d45f900cac5e4e8502bcaf7b4947e060e4d656e386a6db5ba7f0f014d7

  • Size

    161KB

  • Sample

    241230-2pl16sslhq

  • MD5

    b273c3eed34d59b3102f4c82c270d6b5

  • SHA1

    861f45a8d74e5b90347ccd83dc03494ce716d337

  • SHA256

    b7fc96d45f900cac5e4e8502bcaf7b4947e060e4d656e386a6db5ba7f0f014d7

  • SHA512

    07e17f486be0a1fcf4f2d51c8cf8a78cc7292bafa298ce472ad645cb7c321bf2f58e9b8d79b6aa39330da15e3de02d95255d902ad6e52695d0b49340b9e15cbe

  • SSDEEP

    3072:B/63mpMBf4M8+pwhukvhU7fWaX/77/DZgTmbg+MGaFplA33VBrULCx3:Ja/jkvhSlP/7bg8aFnA3br9

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

193.200.130.181:443

95.138.161.226:2303

167.114.113.13:4125

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_b7fc96d45f900cac5e4e8502bcaf7b4947e060e4d656e386a6db5ba7f0f014d7

    • Size

      161KB

    • MD5

      b273c3eed34d59b3102f4c82c270d6b5

    • SHA1

      861f45a8d74e5b90347ccd83dc03494ce716d337

    • SHA256

      b7fc96d45f900cac5e4e8502bcaf7b4947e060e4d656e386a6db5ba7f0f014d7

    • SHA512

      07e17f486be0a1fcf4f2d51c8cf8a78cc7292bafa298ce472ad645cb7c321bf2f58e9b8d79b6aa39330da15e3de02d95255d902ad6e52695d0b49340b9e15cbe

    • SSDEEP

      3072:B/63mpMBf4M8+pwhukvhU7fWaX/77/DZgTmbg+MGaFplA33VBrULCx3:Ja/jkvhSlP/7bg8aFnA3br9

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks