Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
ba9a8fd1b62b9d87224d171c2e3be0fd_JaffaCakes118
-
Size
77KB
-
Sample
240823-gl67qaycje
-
MD5
ba9a8fd1b62b9d87224d171c2e3be0fd
-
SHA1
489e7e3600ee60348849f8922a8e428f117aee7e
-
SHA256
26e626872e082d2c3f713889e1c2dbbe077843d977950cc12ba8658f5ee0e33a
-
SHA512
d7b5e6cf3fa4895ef90d0e60e3f2c8a095b7e2504202458a8caf348661e397ba1d3b71b4520e5fb816f12e7a9a4a95e06de4601140b3d5f2dc8eae248b945ce2
-
SSDEEP
1536:J4gZLUay6+vl/Q15k9YrE9x5EZYg0TWNJ7DWTGmjJv09:Wmry6+vd2k9YrEsDJ7DWTGkJ89
Behavioral task
behavioral1
Sample
ba9a8fd1b62b9d87224d171c2e3be0fd_JaffaCakes118
Resource
debian9-mipsbe-20240611-en
Malware Config
Extracted
mirai
cn.uvgczsuidrtg.com
lo.uvgczsuidrtg.com
Targets
-
-
Target
ba9a8fd1b62b9d87224d171c2e3be0fd_JaffaCakes118
-
Size
77KB
-
MD5
ba9a8fd1b62b9d87224d171c2e3be0fd
-
SHA1
489e7e3600ee60348849f8922a8e428f117aee7e
-
SHA256
26e626872e082d2c3f713889e1c2dbbe077843d977950cc12ba8658f5ee0e33a
-
SHA512
d7b5e6cf3fa4895ef90d0e60e3f2c8a095b7e2504202458a8caf348661e397ba1d3b71b4520e5fb816f12e7a9a4a95e06de4601140b3d5f2dc8eae248b945ce2
-
SSDEEP
1536:J4gZLUay6+vl/Q15k9YrE9x5EZYg0TWNJ7DWTGmjJv09:Wmry6+vd2k9YrEsDJ7DWTGkJ89
Score7/10-
Deletes itself
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Enumerates active TCP sockets
Gets active TCP sockets from /proc virtual filesystem.
-