Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    d54dd394db41cf95dca5d9d1f07e544c_JaffaCakes118

  • Size

    175KB

  • Sample

    241208-fdft5atkgw

  • MD5

    d54dd394db41cf95dca5d9d1f07e544c

  • SHA1

    79ff14e4d6d286d3e9e714d7adf5f1e23c4b5555

  • SHA256

    a514b1f8445283de553ab005cf3a6d3936e72a61317a1e383712e5b88600de00

  • SHA512

    ee2a83e14aaf33fd2cfb2c4df5a38c37b5a0f2afd3972fe4c2403e5ba94f74f7c744654731b6695b6ef0c26d4fa06e1c9f22273b0f21698952d23d9aefcb1cf2

  • SSDEEP

    3072:uiqHCjjlKzGif18TNDKtgaguyTqkBod96P+AY5TxcunFpGlTT:rqHKczD8T5KtgpzqoY9o+F5NccsT

Malware Config

Targets

    • Target

      d54dd394db41cf95dca5d9d1f07e544c_JaffaCakes118

    • Size

      175KB

    • MD5

      d54dd394db41cf95dca5d9d1f07e544c

    • SHA1

      79ff14e4d6d286d3e9e714d7adf5f1e23c4b5555

    • SHA256

      a514b1f8445283de553ab005cf3a6d3936e72a61317a1e383712e5b88600de00

    • SHA512

      ee2a83e14aaf33fd2cfb2c4df5a38c37b5a0f2afd3972fe4c2403e5ba94f74f7c744654731b6695b6ef0c26d4fa06e1c9f22273b0f21698952d23d9aefcb1cf2

    • SSDEEP

      3072:uiqHCjjlKzGif18TNDKtgaguyTqkBod96P+AY5TxcunFpGlTT:rqHKczD8T5KtgpzqoY9o+F5NccsT

    • Cycbot

      Cycbot is a backdoor and trojan written in C++..

    • Cycbot family

    • Detects Cycbot payload

      Cycbot is a backdoor and trojan written in C++.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks