Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    14377s
  • max time network
    104s
  • platform
    linux_amd64
  • resource
    ubuntu1804-amd64-en-20211208
  • submitted
    24/05/2022, 02:21

General

  • Target

    010dd6c661e54bc8c64c8762eb120ab04ff35ce325ec54d5b7d449c9c8e00d24

  • Size

    101KB

  • MD5

    4c3ba14d6261eea9f87f25be4ebc9a24

  • SHA1

    c8cc3514e5a54dcf3e2f7d045767b6bb3402b44a

  • SHA256

    010dd6c661e54bc8c64c8762eb120ab04ff35ce325ec54d5b7d449c9c8e00d24

  • SHA512

    0b589118a256cb4a43a17686fc84a75fa4e54a1f58e6b6e3e87916ac9188798678c9b09ce99dc7ca168db03500d1973f9b78a5af9ed5fc36ea1ec0a0b85c3adf

Score
8/10

Malware Config

Signatures

  • Modifies hosts file 1 IoCs

    Adds to hosts file used for mapping hosts to IP addresses.

  • Writes DNS configuration 1 TTPs 1 IoCs

    Writes data to DNS resolver config file.

  • Modifies rc script 1 TTPs 1 IoCs

    Adding/modifying system rc scripts is a common persistence mechanism.

Processes

  • ./010dd6c661e54bc8c64c8762eb120ab04ff35ce325ec54d5b7d449c9c8e00d24
    ./010dd6c661e54bc8c64c8762eb120ab04ff35ce325ec54d5b7d449c9c8e00d24
    1⤵
    • Modifies rc script
    PID:576

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads