Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    JaffaCakes118_bc46491aad709820e7b3c4fb2edd6b7d6ea8285870f15c4b56bce539f6620f50

  • Size

    204KB

  • Sample

    241230-2zxweswjax

  • MD5

    ca7870e4a46408762ac5622bfe838c64

  • SHA1

    3e53778ee0fe8c230ab11ce74f8d46b43ac2e6c5

  • SHA256

    bc46491aad709820e7b3c4fb2edd6b7d6ea8285870f15c4b56bce539f6620f50

  • SHA512

    f2905b5b32ffacad2621ed5615e941fe2fadcbe6231011dcb01058263496b08e301cc0276a2b6064637c996aceabada392920becf509f147fc0a3dfd7767b600

  • SSDEEP

    3072:u6FOf6h8i6pdDPvaaeEGObTS/HaoGoK9kN+Jcr9bhrFKL3fJpwZ:uZuX6pEaeEDheWa+Jc9bhorfTw

Malware Config

Extracted

Family

dridex

Botnet

40111

C2

45.58.56.12:443

162.241.54.59:6601

51.91.76.89:2303

rc4.plain
1
UVIabEjB7cX6jVKokUQcey9IpyGEGPkvqXISjMkvOrRdeF
rc4.plain
1
A7nJdD3IzXdgiaHV1DVykZf4vgLdgyv3BjvHZxN0p1c96yC1jyzioBieIa2M

Targets

    • Target

      JaffaCakes118_bc46491aad709820e7b3c4fb2edd6b7d6ea8285870f15c4b56bce539f6620f50

    • Size

      204KB

    • MD5

      ca7870e4a46408762ac5622bfe838c64

    • SHA1

      3e53778ee0fe8c230ab11ce74f8d46b43ac2e6c5

    • SHA256

      bc46491aad709820e7b3c4fb2edd6b7d6ea8285870f15c4b56bce539f6620f50

    • SHA512

      f2905b5b32ffacad2621ed5615e941fe2fadcbe6231011dcb01058263496b08e301cc0276a2b6064637c996aceabada392920becf509f147fc0a3dfd7767b600

    • SSDEEP

      3072:u6FOf6h8i6pdDPvaaeEGObTS/HaoGoK9kN+Jcr9bhrFKL3fJpwZ:uZuX6pEaeEDheWa+Jc9bhorfTw

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

    • Checks whether UAC is enabled

MITRE ATT&CK Enterprise v15

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.