Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

6

Static

static

1

dbb79b3c29...kes118

ubuntu-22.04-amd64

6

Analysis

  • max time kernel
    140s
  • max time network
    151s
  • platform
    ubuntu-22.04_amd64
  • resource
    ubuntu2204-amd64-20240611-en
  • resource tags

    arch:amd64arch:i386image:ubuntu2204-amd64-20240611-enkernel:5.15.0-105-genericlocale:en-usos:ubuntu-22.04-amd64system
  • submitted
    12/09/2024, 03:18

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    dbb79b3c29e5e83df9114e04c1833758_JaffaCakes118

  • Size

    25KB

  • MD5

    dbb79b3c29e5e83df9114e04c1833758

  • SHA1

    7e35d23991d32c0efba505532428717c1ab06ff6

  • SHA256

    0a55fd506943adbfa67059db15b5641f270b6257a1d236a46fac8f4fc9c39735

  • SHA512

    16bd98c6cb4a05dc809ff1b622952459c475a213829274d07951dcd8b8ae49be375208aeb8c99fe881a7fff09c1636471cd919ccad7fc1dac55ab288e4d7f0d1

  • SSDEEP

    768:NcDJq25RdsXJbi3AWhrSJLnl8A4n8xeonbcuyD7Uryqc:EfJ0b9GG7l8rn8xeonouy8mqc

Score
6/10
discovery

Malware Config

Signatures

  • Reads system routing table 1 TTPs 1 IoCs

    Gets active network interfaces from /proc virtual filesystem.

    discovery
  • Reads system network configuration 1 TTPs 1 IoCs

    Uses contents of /proc filesystem to enumerate network settings.

    discovery
  • Reads runtime system information 1 IoCs

    Reads data from /proc virtual filesystem.

    discovery

Processes

  • /tmp/dbb79b3c29e5e83df9114e04c1833758_JaffaCakes118
    /tmp/dbb79b3c29e5e83df9114e04c1833758_JaffaCakes118
    1⤵
    • Reads system routing table
    • Reads system network configuration
    • Reads runtime system information
    PID:1590

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads