Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    131s
  • max time network
    155s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20240611-en
  • resource tags

    arch:armhfimage:debian9-armhf-20240611-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    11/12/2024, 08:57

General

  • Target

    jwwofba5.elf

  • Size

    154KB

  • MD5

    f54eef0f2a2b3d1b95d027e2f9fc075b

  • SHA1

    9808f95f07348a1e62b9986ed35ff332f60010b6

  • SHA256

    6f062123d1fa8fb843406f71d2bf782017dad159aea3e23fc98543923c0c2bad

  • SHA512

    d382986c74a44bd247f3c51d45a1fee5d13746500662e5dbca6d30cd113f89deb1c391b4855e233b645c1690a8d10b09acde0e4b63580b1c8c695be8bdaffa8e

  • SSDEEP

    3072:xNKs58C55mYNMRN04VhF6s9RjQnHA86VFTs:nKs58LBX04Vj6sPjQng863Ts

Score
7/10

Malware Config

Signatures

  • Deletes itself 1 IoCs
  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Changes its process name 1 IoCs
  • Reads runtime system information 55 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • /tmp/jwwofba5.elf
    /tmp/jwwofba5.elf
    1⤵
    • Deletes itself
    • Changes its process name
    • Reads runtime system information
    PID:658

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads