Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

JaffaCakes...d28603

debian-9-armhf

6

Analysis

  • max time kernel
    140s
  • max time network
    158s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20240611-en
  • resource tags

    arch:armhfimage:debian9-armhf-20240611-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    06/01/2025, 18:02

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    JaffaCakes118_3261955e948c332811b87b54d4d28603

  • Size

    101KB

  • MD5

    3261955e948c332811b87b54d4d28603

  • SHA1

    dcf3b49b8cd645a4582be6982d9dc31509175af8

  • SHA256

    8a67d0a20f52f8b5913c588c4911eb1f4b337672589453853ae0c67779c33b36

  • SHA512

    b6566f7c999926f0f000615d200af102089c6139f95ee0ca5c3830ee94a9ff753eba7d2ad01f72a9f76a52a29f0d35cf067292eaaa258df603a7370a0ffacff2

  • SSDEEP

    3072:7e9h9oZt5hvFfKufS2faYj0+rQ0Knm4XATe:y9wZt5hNfKfpYj0+rQ0Knm4XATe

Score
6/10
discovery

Malware Config

Signatures

  • Reads system routing table 1 TTPs 1 IoCs

    Gets active network interfaces from /proc virtual filesystem.

    discovery
  • Reads system network configuration 1 TTPs 1 IoCs

    Uses contents of /proc filesystem to enumerate network settings.

    discovery

Processes

  • /tmp/JaffaCakes118_3261955e948c332811b87b54d4d28603
    /tmp/JaffaCakes118_3261955e948c332811b87b54d4d28603
    1⤵
    • Reads system routing table
    • Reads system network configuration
    PID:657

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads