Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
140s -
max time network
148s -
platform
ubuntu-24.04_amd64 -
resource
ubuntu2404-amd64-20240523-en -
resource tags
arch:amd64arch:i386image:ubuntu2404-amd64-20240523-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system -
submitted
18/08/2024, 05:29
Static task
static1
Behavioral task
behavioral1
Sample
a58fb83be409874271fa04709012b5ad_JaffaCakes118
Resource
ubuntu2404-amd64-20240523-en
General
-
Target
a58fb83be409874271fa04709012b5ad_JaffaCakes118
-
Size
196KB
-
MD5
a58fb83be409874271fa04709012b5ad
-
SHA1
5f28ffb496e78b06668c90939774899ed9e6d5d0
-
SHA256
671c2e2c66ef076a8aba02ddf7c4b8320a4110680206596225db4d879797a51d
-
SHA512
1bb5fa71d52318b393848e59765a023af74fcff3602031066779ad2e675850820481e2696bae945bcaea6fa69b7f4b214fd6fcd081419bf82dd622e084218031
-
SSDEEP
6144:W0tRtGwYJMYScVMmLNLFuSNTJxeBkH9eG:VRtcjVMmLNLFuSNTJxeBkH9eG
Malware Config
Signatures
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
description ioc Process File opened for reading /proc/net/route a58fb83be409874271fa04709012b5ad_JaffaCakes118 -
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
description ioc Process File opened for reading /proc/net/route a58fb83be409874271fa04709012b5ad_JaffaCakes118