Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
dbdf13270adabecd0b98d63112bb426b_JaffaCakes118
-
Size
183KB
-
Sample
241209-2kj11sypgp
-
MD5
dbdf13270adabecd0b98d63112bb426b
-
SHA1
32b3f12d92e330fa581877a841f7b5a93a9ea127
-
SHA256
c993d4020006ebb34e761d0c95a8a8ae1e344b4f6c390b2303c4ae08dd5b84fe
-
SHA512
78d701b3d95ef92e04b1a468c427a3ea76d552c3be8091396820688d0eecad60e1296c39d6edb15ef829ad6aec4d9f83616e3f2e995ac7842a380623313d4505
-
SSDEEP
3072:Mf3ZM5wD0eDxS7txhF7BiOk+5cOWAuEA7LNr3lsT6O8vaUO/NwbX850pMIWqojEW:SpM5MSJxhdBiOk+5cOvA7LR46O8v5Zit
Static task
static1
Behavioral task
behavioral1
Sample
dbdf13270adabecd0b98d63112bb426b_JaffaCakes118.exe
Resource
win7-20241010-en
Malware Config
Targets
-
-
Target
dbdf13270adabecd0b98d63112bb426b_JaffaCakes118
-
Size
183KB
-
MD5
dbdf13270adabecd0b98d63112bb426b
-
SHA1
32b3f12d92e330fa581877a841f7b5a93a9ea127
-
SHA256
c993d4020006ebb34e761d0c95a8a8ae1e344b4f6c390b2303c4ae08dd5b84fe
-
SHA512
78d701b3d95ef92e04b1a468c427a3ea76d552c3be8091396820688d0eecad60e1296c39d6edb15ef829ad6aec4d9f83616e3f2e995ac7842a380623313d4505
-
SSDEEP
3072:Mf3ZM5wD0eDxS7txhF7BiOk+5cOWAuEA7LNr3lsT6O8vaUO/NwbX850pMIWqojEW:SpM5MSJxhdBiOk+5cOvA7LR46O8v5Zit
-
Cycbot family
-
Detects Cycbot payload
Cycbot is a backdoor and trojan written in C++.
-
Modifies WinLogon for persistence
-