Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    150s
  • max time network
    148s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20240611-en
  • resource tags

    arch:armhfimage:debian9-armhf-20240611-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    09/01/2025, 15:32

General

  • Target

    JaffaCakes118_cbc641da4770701d93976e44ef81b49c

  • Size

    118KB

  • MD5

    cbc641da4770701d93976e44ef81b49c

  • SHA1

    e674a5ff50aca3b1516fb92103d0a87e5a70d3f3

  • SHA256

    1886e72595228a0f5debaba9b58933793b25c46ef630a9a59f9b2f4acaf7a3d8

  • SHA512

    9a3fbb6196d15df91828264f809e14ebfb5874b85b25a346c7d936f6c7d8ded6f2bc095b1e32997060b3a83c691b2b2596791957b7e28c8ab1d478c80eede610

  • SSDEEP

    3072:WkYPgPggnAb0JWaY/VfzED9uYC+mTQOY5NX3cn:lYPgPggI4Wa8zEDo+mTQOY5R3cn

Score
6/10

Malware Config

Signatures

  • Reads system routing table 1 TTPs 1 IoCs

    Gets active network interfaces from /proc virtual filesystem.

  • Reads system network configuration 1 TTPs 1 IoCs

    Uses contents of /proc filesystem to enumerate network settings.

Processes

  • /tmp/JaffaCakes118_cbc641da4770701d93976e44ef81b49c
    /tmp/JaffaCakes118_cbc641da4770701d93976e44ef81b49c
    1⤵
    • Reads system routing table
    • Reads system network configuration
    PID:660

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads