Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
3s -
platform
debian-9_armhf -
resource
debian9-armhf-20240418-en -
resource tags
-
submitted
07/09/2024, 10:44
General
-
Target
jcubic-jquery.terminal-cebc63d/bin/convert.js
-
Size
3KB
-
MD5
107c8beb3b70a9053336ff0de568e998
-
SHA1
70193e6fc7d5b468704d81cdbb9c5fd0478ccaef
-
SHA256
5762c71b2e7527b3212612daeb915dfe3c90239ec0274715d894bb0f352d3c6d
-
SHA512
0fb94834b9571a228744347d5e9ff25cb3e3f9806ca307953734d186775b09829b185d59a37e156e34b1d33d41f403a95a833c4cca04ebd32b545ad2fc236d21
Score
4/10
Malware Config
Signatures
-
Checks CPU configuration 1 TTPs 1 IoCs
Checks CPU information which indicate if the system is a virtual machine.
-
Reads CPU attributes 1 TTPs 1 IoCs
-
Command and Scripting Interpreter: JavaScript 1 TTPs 4 IoCs
Execution via JavaScript.
-
Enumerates kernel/hardware configuration 1 TTPs 1 IoCs
Reads contents of /sys virtual filesystem to enumerate system information.
-
Reads runtime system information 1 IoCs
Reads data from /proc virtual filesystem.
Processes
-
/tmp/jcubic-jquery.terminal-cebc63d/bin/convert.js/tmp/jcubic-jquery.terminal-cebc63d/bin/convert.js1⤵
-
/usr/local/sbin/nodenode /tmp/jcubic-jquery.terminal-cebc63d/bin/convert.js1⤵
- Command and Scripting Interpreter: JavaScript
-
/usr/local/bin/nodenode /tmp/jcubic-jquery.terminal-cebc63d/bin/convert.js1⤵
- Command and Scripting Interpreter: JavaScript
-
/usr/sbin/nodenode /tmp/jcubic-jquery.terminal-cebc63d/bin/convert.js1⤵
- Command and Scripting Interpreter: JavaScript
-
/usr/bin/nodenode /tmp/jcubic-jquery.terminal-cebc63d/bin/convert.js1⤵
- Checks CPU configuration
- Reads CPU attributes
- Command and Scripting Interpreter: JavaScript
- Enumerates kernel/hardware configuration
- Reads runtime system information