Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    JaffaCakes118_86983e8bad995544a705cfe268977156018cf653d213212e0123639305a81969

  • Size

    163KB

  • Sample

    241230-b9gn3stphp

  • MD5

    155a27e31124d49a9c154b9a09c25b2e

  • SHA1

    23d959ccef950f7c27dd8391e41f5e2398d75d9c

  • SHA256

    86983e8bad995544a705cfe268977156018cf653d213212e0123639305a81969

  • SHA512

    6c934702fd62c33ad32527d99a94143dd83c30b240fdac1ae5271af3e38241eabac5ae69eb7b59da745858d935d78dc0eae61a804ba3eeba6850c7687872538e

  • SSDEEP

    3072:mar6Ys6p54kfdo+APr0aYSbeO6aal8jeytFQTOpp2J:gs4p+ADxnSO6D2cOp

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

43.229.206.212:443

82.209.17.209:8172

162.241.209.225:4125

rc4.plain
1
16dkGStOzdHgjuCciXGdSX7UrHWfYSUG8wEUtKNgzHrWMfTGafJbC
rc4.plain
1
UlufoCqJDohDzGOdBY6ldd1IbFW5KV8BqCAnkqwdDzvq0CsZOOngL

Targets

    • Target

      JaffaCakes118_86983e8bad995544a705cfe268977156018cf653d213212e0123639305a81969

    • Size

      163KB

    • MD5

      155a27e31124d49a9c154b9a09c25b2e

    • SHA1

      23d959ccef950f7c27dd8391e41f5e2398d75d9c

    • SHA256

      86983e8bad995544a705cfe268977156018cf653d213212e0123639305a81969

    • SHA512

      6c934702fd62c33ad32527d99a94143dd83c30b240fdac1ae5271af3e38241eabac5ae69eb7b59da745858d935d78dc0eae61a804ba3eeba6850c7687872538e

    • SSDEEP

      3072:mar6Ys6p54kfdo+APr0aYSbeO6aal8jeytFQTOpp2J:gs4p+ADxnSO6D2cOp

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.