Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

dbfa585396...18.exe

windows7-x64

10

dbfa585396...18.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dbfa5853966f50bccf28fa113378c202_JaffaCakes118

  • Size

    183KB

  • Sample

    241209-3byngsznhl

  • MD5

    dbfa5853966f50bccf28fa113378c202

  • SHA1

    8270a1a4338eb52d929155088e02367b996a4468

  • SHA256

    b8e6e8fbc3bf968f4a99d54d75dd42f4f3b2fe51036b4a21930e72e65a80e2c9

  • SHA512

    0d0c7c09fa6c5dc2b6000bc002bf0a92ecbe2339f503ccc246d807e5601d88abe1e854adcfd672a27d578d706c09b79b5b344fc0ef2716cc7bec91ae2d6bb1f5

  • SSDEEP

    3072:JvB1j0oCB82+uJUxR4i+t//26cMO2pJsZRjckQZnH2vMFfb6Ln+42EaiuBhESui6:JvB1030fxRKtn2fMOGJmRIk07Ffbr4Ln

Score
10/10
cycbotbackdoordiscoverypersistenceratspywarestealerupx

Malware Config

Targets

    • Target

      dbfa5853966f50bccf28fa113378c202_JaffaCakes118

    • Size

      183KB

    • MD5

      dbfa5853966f50bccf28fa113378c202

    • SHA1

      8270a1a4338eb52d929155088e02367b996a4468

    • SHA256

      b8e6e8fbc3bf968f4a99d54d75dd42f4f3b2fe51036b4a21930e72e65a80e2c9

    • SHA512

      0d0c7c09fa6c5dc2b6000bc002bf0a92ecbe2339f503ccc246d807e5601d88abe1e854adcfd672a27d578d706c09b79b5b344fc0ef2716cc7bec91ae2d6bb1f5

    • SSDEEP

      3072:JvB1j0oCB82+uJUxR4i+t//26cMO2pJsZRjckQZnH2vMFfb6Ln+42EaiuBhESui6:JvB1030fxRKtn2fMOGJmRIk07Ffbr4Ln

    Score
    10/10
    cycbotbackdoordiscoverypersistenceratspywarestealerupx

    • Cycbot

      Cycbot is a backdoor and trojan written in C++..

      backdoorratcycbot

    • Cycbot family

      cycbot

    • Detects Cycbot payload

      Cycbot is a backdoor and trojan written in C++.

    • Modifies WinLogon for persistence

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks