Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
JaffaCakes118_5e46b62547b1f4a6f95d01c0d855c3f0
-
Size
169KB
-
Sample
250115-wp32sssjdp
-
MD5
5e46b62547b1f4a6f95d01c0d855c3f0
-
SHA1
e92d082a7e0b0fbcb4357e0fd38f4792f63e145c
-
SHA256
29edf5b543a28c460ca166208340e28dbc376faff2d51809df33ed7a7b2a57a1
-
SHA512
ff636b6cef996c47df578a4ab7a4e1193a82cb83bd702172c49b8cfec1dadfa211a901710e9177fb5cc2ce4625f3679e703e90780567556af250c1a63bceef83
-
SSDEEP
3072:dP7vOxemJVq3bs4nxd9I2vDwcfwuzFg5SE3qjygbqH/pOs2S4Y//WOwpbDFeOo:tro4j73NxQh39H/csBk
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_5e46b62547b1f4a6f95d01c0d855c3f0.exe
Resource
win7-20241010-en
Malware Config
Targets
-
-
Target
JaffaCakes118_5e46b62547b1f4a6f95d01c0d855c3f0
-
Size
169KB
-
MD5
5e46b62547b1f4a6f95d01c0d855c3f0
-
SHA1
e92d082a7e0b0fbcb4357e0fd38f4792f63e145c
-
SHA256
29edf5b543a28c460ca166208340e28dbc376faff2d51809df33ed7a7b2a57a1
-
SHA512
ff636b6cef996c47df578a4ab7a4e1193a82cb83bd702172c49b8cfec1dadfa211a901710e9177fb5cc2ce4625f3679e703e90780567556af250c1a63bceef83
-
SSDEEP
3072:dP7vOxemJVq3bs4nxd9I2vDwcfwuzFg5SE3qjygbqH/pOs2S4Y//WOwpbDFeOo:tro4j73NxQh39H/csBk
-
Cycbot family
-
Detects Cycbot payload
Cycbot is a backdoor and trojan written in C++.
-
Modifies WinLogon for persistence
-