Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

08113ca015...f18867

linux_amd64

1

Analysis

  • max time kernel
    0s
  • max time network
    71s
  • platform
    linux_amd64
  • resource
    ubuntu1804-amd64-en-20211208
  • submitted
    17/06/2022, 14:54 UTC

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    08113ca015468d6c29af4e4e4754c003dacc194ce4a254e15f38060854f18867

  • Size

    207KB

  • MD5

    4bb2f87100fca40bfbb102e48ef43e65

  • SHA1

    3bf79cc3ed82edd6bfe1950b7612a20853e28b09

  • SHA256

    08113ca015468d6c29af4e4e4754c003dacc194ce4a254e15f38060854f18867

  • SHA512

    fabfa71a02fbd38d14f1469737e4ef8729c97b6f1b249a5dae569e0486f12139cca0a17fa8ddb2bd99032c543d4bb39adb341574a30e32b57d48af51c6404888

Score
1/10

Malware Config

Signatures

Processes

  • ./08113ca015468d6c29af4e4e4754c003dacc194ce4a254e15f38060854f18867
    ./08113ca015468d6c29af4e4e4754c003dacc194ce4a254e15f38060854f18867
    1⤵
      PID:577

    Network

    • flag-us
      DNS
      _http._tcp.security.ubuntu.com
      Remote address:
      1.1.1.1:53
      Request
      _http._tcp.security.ubuntu.com
      IN SRV
      Response
    • flag-us
      DNS
      _http._tcp.security.ubuntu.com
      Remote address:
      1.1.1.1:53
      Request
      _http._tcp.security.ubuntu.com
      IN SRV
      Response
    • flag-us
      DNS
      _http._tcp.nl.archive.ubuntu.com
      Remote address:
      1.1.1.1:53
      Request
      _http._tcp.nl.archive.ubuntu.com
      IN SRV
      Response
    • flag-us
      DNS
      _http._tcp.nl.archive.ubuntu.com
      Remote address:
      1.1.1.1:53
      Request
      _http._tcp.nl.archive.ubuntu.com
      IN SRV
      Response
    • flag-us
      DNS
      security.ubuntu.com
      Remote address:
      1.1.1.1:53
      Request
      security.ubuntu.com
      IN A
      Response
      security.ubuntu.com
      IN A
      185.125.190.39
      security.ubuntu.com
      IN A
      185.125.190.36
      security.ubuntu.com
      IN A
      91.189.91.38
      security.ubuntu.com
      IN A
      91.189.91.39
    • flag-us
      DNS
      security.ubuntu.com
      Remote address:
      1.1.1.1:53
      Request
      security.ubuntu.com
      IN AAAA
      Response
      security.ubuntu.com
      IN AAAA
      2001:67c:1562::18
      security.ubuntu.com
      IN AAAA
      2001:67c:1562::15
      security.ubuntu.com
      IN AAAA
      2620:2d:4000:1::19
      security.ubuntu.com
      IN AAAA
      2620:2d:4000:1::16
    • flag-us
      DNS
      nl.archive.ubuntu.com
      Remote address:
      1.1.1.1:53
      Request
      nl.archive.ubuntu.com
      IN A
      Response
      nl.archive.ubuntu.com
      IN CNAME
      ubuntuarchive.bit.nl
      ubuntuarchive.bit.nl
      IN CNAME
      ftp.bit.nl
      ftp.bit.nl
      IN A
      213.136.12.213
    • flag-us
      DNS
      nl.archive.ubuntu.com
      Remote address:
      1.1.1.1:53
      Request
      nl.archive.ubuntu.com
      IN AAAA
      Response
      nl.archive.ubuntu.com
      IN CNAME
      ubuntuarchive.bit.nl
      ubuntuarchive.bit.nl
      IN CNAME
      ftp.bit.nl
      ftp.bit.nl
      IN AAAA
      2001:7b8:3:37::21:3
    • flag-nl
      GET
      http://nl.archive.ubuntu.com/ubuntu/dists/bionic/InRelease
      Remote address:
      213.136.12.213:80
      Request
      GET /ubuntu/dists/bionic/InRelease HTTP/1.1
      Host: nl.archive.ubuntu.com
      Cache-Control: max-age=0
      Accept: text/*
      If-Modified-Since: Thu, 26 Apr 2018 23:38:40 GMT
      User-Agent: Debian APT-HTTP/1.3 (1.6.14)
      Response
      HTTP/1.1 304 Not Modified
      Date: Fri, 17 Jun 2022 14:55:07 GMT
      Server: Apache/2.4.18 (Ubuntu)
      Connection: close
      ETag: "3b180-56ac8e31ec000"
    • flag-gb
      GET
      http://security.ubuntu.com/ubuntu/dists/bionic-security/InRelease
      Remote address:
      185.125.190.39:80
      Request
      GET /ubuntu/dists/bionic-security/InRelease HTTP/1.1
      Host: security.ubuntu.com
      Cache-Control: max-age=0
      Accept: text/*
      If-Modified-Since: Wed, 08 Dec 2021 16:00:00 GMT
      User-Agent: Debian APT-HTTP/1.3 (1.6.14)
      Response
      HTTP/1.1 200 OK
      Date: Fri, 17 Jun 2022 14:55:07 GMT
      Server: Apache/2.4.29 (Ubuntu)
      Last-Modified: Fri, 17 Jun 2022 14:26:00 GMT
      ETag: "15a94-5e1a58887ae00"
      Accept-Ranges: bytes
      Content-Length: 88724
      Cache-Control: max-age=1552, s-maxage=3300, proxy-revalidate
      Expires: Fri, 17 Jun 2022 15:21:00 GMT
    • flag-nl
      GET
      http://nl.archive.ubuntu.com/ubuntu/dists/bionic-updates/InRelease
      Remote address:
      213.136.12.213:80
      Request
      GET /ubuntu/dists/bionic-updates/InRelease HTTP/1.1
      Host: nl.archive.ubuntu.com
      Cache-Control: max-age=0
      Accept: text/*
      If-Modified-Since: Wed, 08 Dec 2021 16:00:00 GMT
      User-Agent: Debian APT-HTTP/1.3 (1.6.14)
      Response
      HTTP/1.1 200 OK
      Date: Fri, 17 Jun 2022 14:55:07 GMT
      Server: Apache/2.4.18 (Ubuntu)
      Last-Modified: Fri, 17 Jun 2022 13:40:00 GMT
      ETag: "15a92-5e1a4e4056c00"
      Accept-Ranges: bytes
      Content-Length: 88722
      Connection: close
    • flag-nl
      GET
      http://nl.archive.ubuntu.com/ubuntu/dists/bionic-backports/InRelease
      Remote address:
      213.136.12.213:80
      Request
      GET /ubuntu/dists/bionic-backports/InRelease HTTP/1.1
      Host: nl.archive.ubuntu.com
      Cache-Control: max-age=0
      Accept: text/*
      If-Modified-Since: Wed, 08 Dec 2021 16:00:00 GMT
      User-Agent: Debian APT-HTTP/1.3 (1.6.14)
      Response
      HTTP/1.1 200 OK
      Date: Fri, 17 Jun 2022 14:55:07 GMT
      Server: Apache/2.4.18 (Ubuntu)
      Last-Modified: Fri, 17 Jun 2022 13:40:00 GMT
      ETag: "12342-5e1a4e4056c00"
      Accept-Ranges: bytes
      Content-Length: 74562
      Connection: close
    • 213.136.12.213:80
      http://nl.archive.ubuntu.com/ubuntu/dists/bionic/InRelease
      http
      478 B
       414 B
       5
      5

      HTTP Request

      GET http://nl.archive.ubuntu.com/ubuntu/dists/bionic/InRelease

      HTTP Response

      304
    • 185.125.190.39:80
      http://security.ubuntu.com/ubuntu/dists/bionic-security/InRelease
      http
      2.1kB
       92.7kB
       37
      70

      HTTP Request

      GET http://security.ubuntu.com/ubuntu/dists/bionic-security/InRelease

      HTTP Response

      200
    • 213.136.12.213:80
      http://nl.archive.ubuntu.com/ubuntu/dists/bionic-updates/InRelease
      http
      902 B
       92.6kB
       13
      70

      HTTP Request

      GET http://nl.archive.ubuntu.com/ubuntu/dists/bionic-updates/InRelease

      HTTP Response

      200
    • 213.136.12.213:80
      http://nl.archive.ubuntu.com/ubuntu/dists/bionic-backports/InRelease
      http
      956 B
       77.9kB
       14
      60

      HTTP Request

      GET http://nl.archive.ubuntu.com/ubuntu/dists/bionic-backports/InRelease

      HTTP Response

      200
    • 1.1.1.1:53
      _http._tcp.security.ubuntu.com
      dns
      163 B
       285 B
       2
      2

      DNS Request

      _http._tcp.security.ubuntu.com

      DNS Request

      _http._tcp.security.ubuntu.com

    • 1.1.1.1:53
      _http._tcp.nl.archive.ubuntu.com
      dns
      167 B
       289 B
       2
      2

      DNS Request

      _http._tcp.nl.archive.ubuntu.com

      DNS Request

      _http._tcp.nl.archive.ubuntu.com

    • 1.1.1.1:53
      security.ubuntu.com
      dns
      76 B
       140 B
       1
      1

      DNS Request

      security.ubuntu.com

      DNS Response

      185.125.190.39
      185.125.190.36
      91.189.91.38
      91.189.91.39

    • 1.1.1.1:53
      security.ubuntu.com
      dns
      76 B
       188 B
       1
      1

      DNS Request

      security.ubuntu.com

      DNS Response

      2001:67c:1562::18
      2001:67c:1562::15
      2620:2d:4000:1::19
      2620:2d:4000:1::16

    • 1.1.1.1:53
      nl.archive.ubuntu.com
      dns
      78 B
       146 B
       1
      1

      DNS Request

      nl.archive.ubuntu.com

      DNS Response

      213.136.12.213

    • 1.1.1.1:53
      nl.archive.ubuntu.com
      dns
      78 B
       158 B
       1
      1

      DNS Request

      nl.archive.ubuntu.com

      DNS Response

      2001:7b8:3:37::21:3

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    We care about your privacy.

    This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.