Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    11585e0298c8b56727dbfd9f2e7fd9c1_JaffaCakes118

  • Size

    117KB

  • Sample

    241004-cbj7zsyalj

  • MD5

    11585e0298c8b56727dbfd9f2e7fd9c1

  • SHA1

    544d07736bc660dae169c19ba12a0de0f13ed32a

  • SHA256

    67d8ac24f83ca661840b67e277a53b44a459d990ac883526e7f38f89c2cb7193

  • SHA512

    b1605a16042a5bd92a02fb8f9896026f4178370530183274c6f01ec0372e3b2d0592d3e567b3518146c60eb125dba18099950b501a13df979cb925627d5a7938

  • SSDEEP

    3072:58nzH4+DeKLTKjw1zsGaudF0Hkmz09M/97cyr:58nzH4+DeK+6zsGa6FRmzeM/97cyr

Score
10/10

Malware Config

Extracted

Family

mirai

Botnet

SSH

Targets

    • Target

      11585e0298c8b56727dbfd9f2e7fd9c1_JaffaCakes118

    • Size

      117KB

    • MD5

      11585e0298c8b56727dbfd9f2e7fd9c1

    • SHA1

      544d07736bc660dae169c19ba12a0de0f13ed32a

    • SHA256

      67d8ac24f83ca661840b67e277a53b44a459d990ac883526e7f38f89c2cb7193

    • SHA512

      b1605a16042a5bd92a02fb8f9896026f4178370530183274c6f01ec0372e3b2d0592d3e567b3518146c60eb125dba18099950b501a13df979cb925627d5a7938

    • SSDEEP

      3072:58nzH4+DeKLTKjw1zsGaudF0Hkmz09M/97cyr:58nzH4+DeK+6zsGa6FRmzeM/97cyr

    Score
    9/10
    • Contacts a large (236917) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

MITRE ATT&CK Enterprise v15

Tasks