Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
JaffaCakes118_ab1511354f5335345c749c1fdae82c10
-
Size
171KB
-
Sample
250118-qr7vwavrhr
-
MD5
ab1511354f5335345c749c1fdae82c10
-
SHA1
c537e09103702ef7721ead2ee3cccfa114f23a92
-
SHA256
7c9bbd2f437323203827b635edce5270ccc1d725540bf4c0050c38d60cb86486
-
SHA512
0c5f2541c0cad358f2aabf0294349f9c5c01af9e8586bb63cc12096ab181ac41827de5f49cc641ac4eeccedf1815798765b448509b7d51854d9869ce05e70500
-
SSDEEP
3072:/9ocr+PgxoG7R/T4Js8o1xlPU6GYYdNeYT/vYRwxR7QCBZwPPB9RfRn/FDyJ6:/VyGvt20vl6YYdNeWYRwzEXPpjGJ6
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_ab1511354f5335345c749c1fdae82c10.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
JaffaCakes118_ab1511354f5335345c749c1fdae82c10.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
JaffaCakes118_ab1511354f5335345c749c1fdae82c10
-
Size
171KB
-
MD5
ab1511354f5335345c749c1fdae82c10
-
SHA1
c537e09103702ef7721ead2ee3cccfa114f23a92
-
SHA256
7c9bbd2f437323203827b635edce5270ccc1d725540bf4c0050c38d60cb86486
-
SHA512
0c5f2541c0cad358f2aabf0294349f9c5c01af9e8586bb63cc12096ab181ac41827de5f49cc641ac4eeccedf1815798765b448509b7d51854d9869ce05e70500
-
SSDEEP
3072:/9ocr+PgxoG7R/T4Js8o1xlPU6GYYdNeYT/vYRwxR7QCBZwPPB9RfRn/FDyJ6:/VyGvt20vl6YYdNeWYRwzEXPpjGJ6
-
Cycbot family
-
Detects Cycbot payload
Cycbot is a backdoor and trojan written in C++.
-
Modifies WinLogon for persistence
-