Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

JaffaCakes...11.dll

windows7-x64

10

JaffaCakes...11.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_a4538a3791959a98c2a22fd45499802d58e389662d6b04ebf52721de474e5b11

  • Size

    188KB

  • Sample

    241230-xy925svjhr

  • MD5

    8edb028909b2870ca7119713553bb970

  • SHA1

    87076f8954afe1b9a8fa9636223a232e75113a39

  • SHA256

    a4538a3791959a98c2a22fd45499802d58e389662d6b04ebf52721de474e5b11

  • SHA512

    96ed70e1d80c3c1d4ebf0e4e132053e98504775b9a0fd2fd2ebf80d13a4c5f67b527ca668bc89bbbcf2c61b1b4c1d45a016968198d6d571e975be796582d1394

  • SSDEEP

    3072:tteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIz69qM:Zq7fYIHBZkTB6DWruUCOwjt

Score
10/10
dridex22201botnetdiscoveryloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664
rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_a4538a3791959a98c2a22fd45499802d58e389662d6b04ebf52721de474e5b11

    • Size

      188KB

    • MD5

      8edb028909b2870ca7119713553bb970

    • SHA1

      87076f8954afe1b9a8fa9636223a232e75113a39

    • SHA256

      a4538a3791959a98c2a22fd45499802d58e389662d6b04ebf52721de474e5b11

    • SHA512

      96ed70e1d80c3c1d4ebf0e4e132053e98504775b9a0fd2fd2ebf80d13a4c5f67b527ca668bc89bbbcf2c61b1b4c1d45a016968198d6d571e975be796582d1394

    • SSDEEP

      3072:tteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIz69qM:Zq7fYIHBZkTB6DWruUCOwjt

    Score
    10/10
    dridex22201botnetdiscoveryloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex family

      dridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks