Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    0s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20240611-en
  • resource tags

    arch:armhfimage:debian9-armhf-20240611-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    21/09/2024, 02:58

General

  • Target

    eef245274bf9775a9d547c71cf4a7aff_JaffaCakes118

  • Size

    23KB

  • MD5

    eef245274bf9775a9d547c71cf4a7aff

  • SHA1

    8a763092d5628a9a00d23d5dbfdbd608c6d98408

  • SHA256

    028cd817c17ba3281a06be7def720f5d01434a8acb0df3f2c90dabeaed2ddea6

  • SHA512

    1b37d0772bdabf79c2fdd19ca3b1f5e2f2aecd1119dd62bc9854d76cece3f053446fd76ee8dcf4f8fc6143fcdcc3d941270303a2995b1d031745688cad8be51b

  • SSDEEP

    384:Xw+JyjApqk3twHJV8My5Aqm9bonzPtErWuAK331ClUBmdGU5E/73:XwcLgk9IYeqVyKRc1ClU3Ucr

Malware Config

Extracted

Family

mirai

Botnet

WICKED

Signatures

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

  • Reads runtime system information 1 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • /tmp/eef245274bf9775a9d547c71cf4a7aff_JaffaCakes118
    /tmp/eef245274bf9775a9d547c71cf4a7aff_JaffaCakes118
    1⤵
    • Reads runtime system information
    PID:639

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads