Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    150s
  • max time network
    153s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20240611-en
  • resource tags

    arch:armhfimage:debian9-armhf-20240611-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    29/12/2024, 12:47

General

  • Target

    bot.arm5.elf

  • Size

    126KB

  • MD5

    07250240f8d90b729e6b3d98b8c0ff54

  • SHA1

    bf8fb0fb42bbfce2dc48417272ce904bf3c56bc9

  • SHA256

    1d23c62789148a29cacbd39dcd029559c6bb204fed4241a469a68c5f8cbd79da

  • SHA512

    8fe0e42244fdc845f595c227c9ac0564033949ebdb70421c5e4db1155377082463a2cacca499d948cb1460e288fe5bdf4374efd613d03d65e10e2725cb7836f2

  • SSDEEP

    1536:JSDwI4fG50nVg/QXEE9+19jAd424V8G2TTZxhLNqLbqt1budpLSlcCwyw6FPRbl:0DwLYhQX/019jc4r2/ZxhZqQbu34ebV

Score
6/10

Malware Config

Signatures

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Changes its process name 1 IoCs
  • Reads runtime system information 64 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • /tmp/bot.arm5.elf
    /tmp/bot.arm5.elf
    1⤵
    • Changes its process name
    • Reads runtime system information
    PID:663

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads