Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

d54dd394db...18.exe

windows7-x64

10

d54dd394db...18.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d54dd394db41cf95dca5d9d1f07e544c_JaffaCakes118

  • Size

    175KB

  • Sample

    241208-fdft5atkgw

  • MD5

    d54dd394db41cf95dca5d9d1f07e544c

  • SHA1

    79ff14e4d6d286d3e9e714d7adf5f1e23c4b5555

  • SHA256

    a514b1f8445283de553ab005cf3a6d3936e72a61317a1e383712e5b88600de00

  • SHA512

    ee2a83e14aaf33fd2cfb2c4df5a38c37b5a0f2afd3972fe4c2403e5ba94f74f7c744654731b6695b6ef0c26d4fa06e1c9f22273b0f21698952d23d9aefcb1cf2

  • SSDEEP

    3072:uiqHCjjlKzGif18TNDKtgaguyTqkBod96P+AY5TxcunFpGlTT:rqHKczD8T5KtgpzqoY9o+F5NccsT

Score
10/10
cycbotbackdoordiscoveryratspywarestealerupx

Malware Config

Targets

    • Target

      d54dd394db41cf95dca5d9d1f07e544c_JaffaCakes118

    • Size

      175KB

    • MD5

      d54dd394db41cf95dca5d9d1f07e544c

    • SHA1

      79ff14e4d6d286d3e9e714d7adf5f1e23c4b5555

    • SHA256

      a514b1f8445283de553ab005cf3a6d3936e72a61317a1e383712e5b88600de00

    • SHA512

      ee2a83e14aaf33fd2cfb2c4df5a38c37b5a0f2afd3972fe4c2403e5ba94f74f7c744654731b6695b6ef0c26d4fa06e1c9f22273b0f21698952d23d9aefcb1cf2

    • SSDEEP

      3072:uiqHCjjlKzGif18TNDKtgaguyTqkBod96P+AY5TxcunFpGlTT:rqHKczD8T5KtgpzqoY9o+F5NccsT

    Score
    10/10
    cycbotbackdoordiscoveryratspywarestealerupx

    • Cycbot

      Cycbot is a backdoor and trojan written in C++..

      backdoorratcycbot

    • Cycbot family

      cycbot

    • Detects Cycbot payload

      Cycbot is a backdoor and trojan written in C++.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks