Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    JaffaCakes118_5e46b62547b1f4a6f95d01c0d855c3f0

  • Size

    169KB

  • Sample

    250115-wp32sssjdp

  • MD5

    5e46b62547b1f4a6f95d01c0d855c3f0

  • SHA1

    e92d082a7e0b0fbcb4357e0fd38f4792f63e145c

  • SHA256

    29edf5b543a28c460ca166208340e28dbc376faff2d51809df33ed7a7b2a57a1

  • SHA512

    ff636b6cef996c47df578a4ab7a4e1193a82cb83bd702172c49b8cfec1dadfa211a901710e9177fb5cc2ce4625f3679e703e90780567556af250c1a63bceef83

  • SSDEEP

    3072:dP7vOxemJVq3bs4nxd9I2vDwcfwuzFg5SE3qjygbqH/pOs2S4Y//WOwpbDFeOo:tro4j73NxQh39H/csBk

Malware Config

Targets

    • Target

      JaffaCakes118_5e46b62547b1f4a6f95d01c0d855c3f0

    • Size

      169KB

    • MD5

      5e46b62547b1f4a6f95d01c0d855c3f0

    • SHA1

      e92d082a7e0b0fbcb4357e0fd38f4792f63e145c

    • SHA256

      29edf5b543a28c460ca166208340e28dbc376faff2d51809df33ed7a7b2a57a1

    • SHA512

      ff636b6cef996c47df578a4ab7a4e1193a82cb83bd702172c49b8cfec1dadfa211a901710e9177fb5cc2ce4625f3679e703e90780567556af250c1a63bceef83

    • SSDEEP

      3072:dP7vOxemJVq3bs4nxd9I2vDwcfwuzFg5SE3qjygbqH/pOs2S4Y//WOwpbDFeOo:tro4j73NxQh39H/csBk

    • Cycbot

      Cycbot is a backdoor and trojan written in C++..

    • Cycbot family

    • Detects Cycbot payload

      Cycbot is a backdoor and trojan written in C++.

    • Modifies WinLogon for persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks