Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
e2a8c88ff29931aefcd244c8717e66ac_JaffaCakes118
-
Size
182KB
-
Sample
241211-wtsrmatkgx
-
MD5
e2a8c88ff29931aefcd244c8717e66ac
-
SHA1
6cc66afbb638baf72c0843e60572b0d5f2e97949
-
SHA256
b9c6548132ef29cd77a3ca881ab8fde9b19b37c604f8224b1379b220f1765176
-
SHA512
82c4f8ae58e079db6464b90c93585fb70085bcae48cd1408664987916912bad7d89e0e30e36413f8b9159db65d10feb68e8b222c61447d8476b3de71633e0437
-
SSDEEP
3072:WDMOhfDaJ5OU4AxIatRyL2kTl63DeujETrB4GluHdMlIeLA:W4uLs5ON5yRLks3Dek0B7uHClfA
Static task
static1
Behavioral task
behavioral1
Sample
e2a8c88ff29931aefcd244c8717e66ac_JaffaCakes118.exe
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
e2a8c88ff29931aefcd244c8717e66ac_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
e2a8c88ff29931aefcd244c8717e66ac_JaffaCakes118
-
Size
182KB
-
MD5
e2a8c88ff29931aefcd244c8717e66ac
-
SHA1
6cc66afbb638baf72c0843e60572b0d5f2e97949
-
SHA256
b9c6548132ef29cd77a3ca881ab8fde9b19b37c604f8224b1379b220f1765176
-
SHA512
82c4f8ae58e079db6464b90c93585fb70085bcae48cd1408664987916912bad7d89e0e30e36413f8b9159db65d10feb68e8b222c61447d8476b3de71633e0437
-
SSDEEP
3072:WDMOhfDaJ5OU4AxIatRyL2kTl63DeujETrB4GluHdMlIeLA:W4uLs5ON5yRLks3Dek0B7uHClfA
-
Cycbot family
-
Detects Cycbot payload
Cycbot is a backdoor and trojan written in C++.
-
Modifies WinLogon for persistence
-