Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
140s -
max time network
149s -
platform
ubuntu-20.04_amd64 -
resource
ubuntu2004-amd64-20240221-en -
resource tags
arch:amd64arch:i386image:ubuntu2004-amd64-20240221-enkernel:5.4.0-169-genericlocale:en-usos:ubuntu-20.04-amd64system -
submitted
01/05/2024, 17:08
Behavioral task
behavioral1
Sample
0c5bdfa48acd9becc745a810e36d4fc3_JaffaCakes118
Resource
ubuntu2004-amd64-20240221-en
2 signatures
150 seconds
General
-
Target
0c5bdfa48acd9becc745a810e36d4fc3_JaffaCakes118
-
Size
70KB
-
MD5
0c5bdfa48acd9becc745a810e36d4fc3
-
SHA1
5ac4c7381dd70f71694d830fd09ae04d635b65e3
-
SHA256
df94a06743ac354deb2fe6c326d48eb1d996ef238bf2f5c2b3d0f6fcda54b02c
-
SHA512
f9f7140f9038a06c01655141c63a278fa91c0913a556060b14783c739780ed9a76679705a3c1e2faea1300095b0ff6c667c48a327e578a144c1456795270a86f
-
SSDEEP
1536:2jZjdD/smTdD8IDa4k+SY6ThBg572Nl1M7U7YSmd+lVOCsUxfg71:2jVdDBoetkXFBgCBMqDmMlVOCVxfg71
Score
6/10
Malware Config
Signatures
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
description ioc Process File opened for reading /proc/net/route 0c5bdfa48acd9becc745a810e36d4fc3_JaffaCakes118 -
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
description ioc Process File opened for reading /proc/net/route 0c5bdfa48acd9becc745a810e36d4fc3_JaffaCakes118