Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

eea8db3922...kes118

ubuntu-22.04-amd64

6

Analysis

  • max time kernel
    120s
  • max time network
    136s
  • platform
    ubuntu-22.04_amd64
  • resource
    ubuntu2204-amd64-20240729-en
  • resource tags

    arch:amd64arch:i386image:ubuntu2204-amd64-20240729-enkernel:5.15.0-105-genericlocale:en-usos:ubuntu-22.04-amd64system
  • submitted
    20/09/2024, 23:40

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    eea8db3922e23eacd76996f9b03d003d_JaffaCakes118

  • Size

    1.1MB

  • MD5

    eea8db3922e23eacd76996f9b03d003d

  • SHA1

    38f226c5c9f55db65e22d2088a880a7dc8c20fc5

  • SHA256

    42da321b7c061f064b8367998edfad492aa35426d37b2d355138a5ddeb076e23

  • SHA512

    129cbf8ad482d327c5f60546220dc4c8cb021a2bd4ea1341303f39b287d967b1e59bdcc6ff69fa6bec3495065bcce3c63a59c5c3c179a33e5cb7c6ec07e97500

  • SSDEEP

    24576:bRLbsvvUtJ8aeCmpbeoTi7j0Pk7BhFbEKQeLgxstcZn7gyqc:Q9v

Score
6/10
discovery

Malware Config

Signatures

  • Reads system routing table 1 TTPs 1 IoCs

    Gets active network interfaces from /proc virtual filesystem.

    discovery
  • Changes its process name 1 IoCs
  • Reads system network configuration 1 TTPs 1 IoCs

    Uses contents of /proc filesystem to enumerate network settings.

    discovery

Processes

  • /tmp/eea8db3922e23eacd76996f9b03d003d_JaffaCakes118
    /tmp/eea8db3922e23eacd76996f9b03d003d_JaffaCakes118
    1⤵
    • Reads system routing table
    • Changes its process name
    • Reads system network configuration
    PID:1567

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads