Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
daad9b133d139f509a2ef348da66c146_JaffaCakes118
-
Size
187KB
-
Sample
241209-vrqzkszlhq
-
MD5
daad9b133d139f509a2ef348da66c146
-
SHA1
1f8730c8bc7a0765e2f0983ae88f64838eb7fa84
-
SHA256
1b3a4ba95af464fc222df26f71c5c8c44b4beca002176ae5372471caf2bb2418
-
SHA512
a62c92899220125132b5805140d9f43af86e35537ef362e069bd8da592bc925a502e20c7b7d386cef09532667c7d39b1d785e293bdad39deeeba3be531cc62d2
-
SSDEEP
3072:umpgG33H1u5F79GNgPrnw+fg+UbH8eIA6EfI73VrarwObkeLpp+RuDN4o:mwHobkCbw+fAmdzLparwWLpgSGo
Static task
static1
Behavioral task
behavioral1
Sample
daad9b133d139f509a2ef348da66c146_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
daad9b133d139f509a2ef348da66c146_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
daad9b133d139f509a2ef348da66c146_JaffaCakes118
-
Size
187KB
-
MD5
daad9b133d139f509a2ef348da66c146
-
SHA1
1f8730c8bc7a0765e2f0983ae88f64838eb7fa84
-
SHA256
1b3a4ba95af464fc222df26f71c5c8c44b4beca002176ae5372471caf2bb2418
-
SHA512
a62c92899220125132b5805140d9f43af86e35537ef362e069bd8da592bc925a502e20c7b7d386cef09532667c7d39b1d785e293bdad39deeeba3be531cc62d2
-
SSDEEP
3072:umpgG33H1u5F79GNgPrnw+fg+UbH8eIA6EfI73VrarwObkeLpp+RuDN4o:mwHobkCbw+fAmdzLparwWLpgSGo
-
Cycbot family
-
Detects Cycbot payload
Cycbot is a backdoor and trojan written in C++.
-
Adds Run key to start application
-