Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    JaffaCakes118_69783f704e9622634593d87025682fb1

  • Size

    165KB

  • Sample

    250116-dxgjnazrhr

  • MD5

    69783f704e9622634593d87025682fb1

  • SHA1

    051414fc0cd4e6ecd775d4181826f61025ac2e8d

  • SHA256

    16a5958a11e87444be3d404523ba3ff7e1b9ab53711afe784bc171fa557a02f6

  • SHA512

    2e20ac05ac508446df613bc89b452ce054400dce2503d8aa96aba567798462168726709b1d2f94b08ee007095b534f7d97deed4710ea751885f06d0122daca3d

  • SSDEEP

    3072:+zyAKCVCN/u9TMoINGs8YqJzO7lXf5XtsCyy6QAV2/it+AriuF:+B/CNuTMDX9kuf5ryQa2/i1iu

Malware Config

Targets

    • Target

      JaffaCakes118_69783f704e9622634593d87025682fb1

    • Size

      165KB

    • MD5

      69783f704e9622634593d87025682fb1

    • SHA1

      051414fc0cd4e6ecd775d4181826f61025ac2e8d

    • SHA256

      16a5958a11e87444be3d404523ba3ff7e1b9ab53711afe784bc171fa557a02f6

    • SHA512

      2e20ac05ac508446df613bc89b452ce054400dce2503d8aa96aba567798462168726709b1d2f94b08ee007095b534f7d97deed4710ea751885f06d0122daca3d

    • SSDEEP

      3072:+zyAKCVCN/u9TMoINGs8YqJzO7lXf5XtsCyy6QAV2/it+AriuF:+B/CNuTMDX9kuf5ryQa2/i1iu

    • Cycbot

      Cycbot is a backdoor and trojan written in C++..

    • Cycbot family

    • Detects Cycbot payload

      Cycbot is a backdoor and trojan written in C++.

    • Modifies WinLogon for persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks