Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    d61d9f906c93eb2e54e522c3e1c97016_JaffaCakes118

  • Size

    157KB

  • Sample

    241208-j96bfasrgn

  • MD5

    d61d9f906c93eb2e54e522c3e1c97016

  • SHA1

    92dc5bf4bb0d263ea8537d10d31b8c9f555f7417

  • SHA256

    e5dbae70187ff48257f17536d13f7219731c9faa2bf41a3c82278457848bc9a9

  • SHA512

    54d9cf8e5f85a3074ff35c13b7c251d9ba3d2e2a1c775605f19f49ebe70472f39c6dc4c7852598771a763668e60164623e2edc646aebf39ee0044eaabe1a8325

  • SSDEEP

    3072:NpImIa5PWExNAcLuJjhW3fMA3sFctlRA3fG2/Uhd3tNLmvmR:5Ia5PWM1is3YFcfRA3fOFfL/

Malware Config

Targets

    • Target

      d61d9f906c93eb2e54e522c3e1c97016_JaffaCakes118

    • Size

      157KB

    • MD5

      d61d9f906c93eb2e54e522c3e1c97016

    • SHA1

      92dc5bf4bb0d263ea8537d10d31b8c9f555f7417

    • SHA256

      e5dbae70187ff48257f17536d13f7219731c9faa2bf41a3c82278457848bc9a9

    • SHA512

      54d9cf8e5f85a3074ff35c13b7c251d9ba3d2e2a1c775605f19f49ebe70472f39c6dc4c7852598771a763668e60164623e2edc646aebf39ee0044eaabe1a8325

    • SSDEEP

      3072:NpImIa5PWExNAcLuJjhW3fMA3sFctlRA3fG2/Uhd3tNLmvmR:5Ia5PWM1is3YFcfRA3fOFfL/

    • Cycbot

      Cycbot is a backdoor and trojan written in C++..

    • Cycbot family

    • Detects Cycbot payload

      Cycbot is a backdoor and trojan written in C++.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks