Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    48421c3054fbb7b2daa46cc451f16c47_JaffaCakes118

  • Size

    59KB

  • Sample

    240515-12mb2aee2y

  • MD5

    48421c3054fbb7b2daa46cc451f16c47

  • SHA1

    dba7d15e429ba848b47718eb16eeb54d0c2d21e4

  • SHA256

    7452ac0739b07fb7e2b1cb012b8890990c35cf2f40aa17e2d2076743399c0547

  • SHA512

    9a609ba3caef13969832fe32862b8439f80ae3081989ef778aeb1de74729a3aeb172a87beea10d3234a56b1234ba665cad27aa0928aa35c028dfe8cdc57c8998

  • SSDEEP

    768:apT67ukP415irk5S/7azChOuPbYbYbJNe19BJmq/bUu/3HkmYS6Ni3ek34X4It:OT6O1v5o7azCEctNe1/nbU9NNw3o4

Malware Config

Extracted

Family

mirai

Botnet

REKAI

Targets

    • Target

      48421c3054fbb7b2daa46cc451f16c47_JaffaCakes118

    • Size

      59KB

    • MD5

      48421c3054fbb7b2daa46cc451f16c47

    • SHA1

      dba7d15e429ba848b47718eb16eeb54d0c2d21e4

    • SHA256

      7452ac0739b07fb7e2b1cb012b8890990c35cf2f40aa17e2d2076743399c0547

    • SHA512

      9a609ba3caef13969832fe32862b8439f80ae3081989ef778aeb1de74729a3aeb172a87beea10d3234a56b1234ba665cad27aa0928aa35c028dfe8cdc57c8998

    • SSDEEP

      768:apT67ukP415irk5S/7azChOuPbYbYbJNe19BJmq/bUu/3HkmYS6Ni3ek34X4It:OT6O1v5o7azCEctNe1/nbU9NNw3o4

    Score
    9/10
    • Contacts a large (23831) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks