Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
119s -
max time network
140s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
11/09/2024, 23:07 UTC
Static task
static1
Behavioral task
behavioral1
Sample
db63506acd325cca96811f33fbb43f67_JaffaCakes118.js
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
db63506acd325cca96811f33fbb43f67_JaffaCakes118.js
Resource
win10v2004-20240802-en
General
-
Target
db63506acd325cca96811f33fbb43f67_JaffaCakes118.js
-
Size
19KB
-
MD5
db63506acd325cca96811f33fbb43f67
-
SHA1
47715ecdcb4d458024375784ce5ffd6b99cf31fc
-
SHA256
1856bef5d232336a043f170bdc21e47cd3ae58cf0922e4db73864016fdc6a394
-
SHA512
b4469bf7f4b5e043f366a7771001499dda227937f9e9b26abcefe57c76debd9f2bbfc37dace9c5c0d56fa0a59fd93376140b72160d226f2c259bbc088f0a5208
-
SSDEEP
192:BheXdgBb9juRdwarkRkn9z5WI552gm1V6w7O/1AFHc5IkDQRqP8Q2cQ2SaefTg80:aRdt9zZwaefTg8g0sRUVTncb
Malware Config
Signatures
-
Command and Scripting Interpreter: JavaScript 1 TTPs
Processes
Network
-
Remote address:8.8.8.8:53Request133.211.185.52.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request240.221.184.93.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request240.221.184.93.in-addr.arpaIN PTR
-
Remote address:8.8.8.8:53Request64.159.190.20.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request64.159.190.20.in-addr.arpaIN PTR
-
Remote address:8.8.8.8:53Request64.159.190.20.in-addr.arpaIN PTR
-
Remote address:8.8.8.8:53Request95.221.229.192.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request228.249.119.40.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request86.23.85.13.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request232.168.11.51.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request15.164.165.52.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request2.36.159.162.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request86.23.85.13.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request13.227.111.52.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request172.214.232.199.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request1.3.b.8.b.e.f.b.0.0.0.0.0.0.0.0.4.0.0.a.0.0.1.f.1.1.1.0.1.0.a.2.ip6.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request107.12.20.2.in-addr.arpaIN PTRResponse107.12.20.2.in-addr.arpaIN PTRa2-20-12-107deploystaticakamaitechnologiescom
-
73 B 147 B 1 1
DNS Request
133.211.185.52.in-addr.arpa
-
146 B 144 B 2 1
DNS Request
240.221.184.93.in-addr.arpa
DNS Request
240.221.184.93.in-addr.arpa
-
216 B 158 B 3 1
DNS Request
64.159.190.20.in-addr.arpa
DNS Request
64.159.190.20.in-addr.arpa
DNS Request
64.159.190.20.in-addr.arpa
-
73 B 144 B 1 1
DNS Request
95.221.229.192.in-addr.arpa
-
73 B 159 B 1 1
DNS Request
228.249.119.40.in-addr.arpa
-
70 B 144 B 1 1
DNS Request
86.23.85.13.in-addr.arpa
-
72 B 158 B 1 1
DNS Request
232.168.11.51.in-addr.arpa
-
72 B 146 B 1 1
DNS Request
15.164.165.52.in-addr.arpa
-
71 B 133 B 1 1
DNS Request
2.36.159.162.in-addr.arpa
-
70 B 144 B 1 1
DNS Request
86.23.85.13.in-addr.arpa
-
72 B 158 B 1 1
DNS Request
13.227.111.52.in-addr.arpa
-
74 B 128 B 1 1
DNS Request
172.214.232.199.in-addr.arpa
-
118 B 204 B 1 1
DNS Request
1.3.b.8.b.e.f.b.0.0.0.0.0.0.0.0.4.0.0.a.0.0.1.f.1.1.1.0.1.0.a.2.ip6.arpa
-
70 B 133 B 1 1
DNS Request
107.12.20.2.in-addr.arpa