Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

fea23b18b4...kes118

ubuntu-22.04-amd64

6

Analysis

  • max time kernel
    140s
  • max time network
    148s
  • platform
    ubuntu-22.04_amd64
  • resource
    ubuntu2204-amd64-20240611-en
  • resource tags

    arch:amd64arch:i386image:ubuntu2204-amd64-20240611-enkernel:5.15.0-105-genericlocale:en-usos:ubuntu-22.04-amd64system
  • submitted
    29/09/2024, 13:33

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    fea23b18b423e5eecc11880296827d67_JaffaCakes118

  • Size

    83KB

  • MD5

    fea23b18b423e5eecc11880296827d67

  • SHA1

    b7a20befd4f217eedbe484ecca95cd11cff577da

  • SHA256

    a1371df27bc7470b91266f8a5f009f9ee6ad16baab385aab67bebf4993e80b1e

  • SHA512

    990bd1b1e1959d972124f90a399f3d0239218403e78b2473a7348f3d1dee2eb99915d2704426a4bdd51ecfff5a79e2ed70a7000fb6304a2934c980e39aaee731

  • SSDEEP

    1536:tG0P74qU9kUM9HqjjoXow5jvl7MHdJfuu6YK0mz5hYdddddVbdQl5+mYHc0r6jmy:tG0THU9kUM9HqjjoXtjvZM9duT35hAb2

Score
6/10
discovery

Malware Config

Signatures

  • Reads system routing table 1 TTPs 1 IoCs

    Gets active network interfaces from /proc virtual filesystem.

    discovery
  • Reads system network configuration 1 TTPs 1 IoCs

    Uses contents of /proc filesystem to enumerate network settings.

    discovery

Processes

  • /tmp/fea23b18b423e5eecc11880296827d67_JaffaCakes118
    /tmp/fea23b18b423e5eecc11880296827d67_JaffaCakes118
    1⤵
    • Reads system routing table
    • Reads system network configuration
    PID:1557

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads