Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
17127s -
max time network
162s -
platform
linux_armhf -
resource
debian9-armhf-en-20211208 -
submitted
24/06/2022, 22:23
Static task
static1
Behavioral task
behavioral1
Sample
a587083ef2c6169e87ba73e9e51f1e78d020b5924e4419fe0ab9527e298562e1
Resource
debian9-armhf-en-20211208
General
-
Target
a587083ef2c6169e87ba73e9e51f1e78d020b5924e4419fe0ab9527e298562e1
-
Size
127KB
-
MD5
8a804570ec5719b5fe18a0948ea4d915
-
SHA1
c7da0b4134d8ca1baa2d6a77042c3a1ef9aa0f43
-
SHA256
a587083ef2c6169e87ba73e9e51f1e78d020b5924e4419fe0ab9527e298562e1
-
SHA512
e9372a5aacc3fee692d954f61492b1bb217d8398af30d63df9451e1420be8e1b717ad01530a113c9c2c12d4e09acebbda81183169c82e25ea7d1c3237910b608
Malware Config
Signatures
-
Contacts a large (35490) amount of remote hosts 1 TTPs
This may indicate a network scan to discover remotely running services.
-
Creates a large amount of network flows 1 TTPs
This may indicate a network scan to discover remotely running services.
-
Unexpected DNS network traffic destination 25 IoCs
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
description ioc Destination IP 84.200.69.80 Destination IP 84.200.70.40 Destination IP 91.239.100.100 Destination IP 84.200.69.80 Destination IP 84.200.70.40 Destination IP 91.239.100.100 Destination IP 91.239.100.100 Destination IP 84.200.69.80 Destination IP 84.200.69.80 Destination IP 84.200.70.40 Destination IP 84.200.69.80 Destination IP 84.200.69.80 Destination IP 84.200.70.40 Destination IP 84.200.70.40 Destination IP 84.200.69.80 Destination IP 84.200.69.80 Destination IP 84.200.70.40 Destination IP 84.200.70.40 Destination IP 91.239.100.100 Destination IP 84.200.70.40 Destination IP 84.200.69.80 Destination IP 84.200.69.80 Destination IP 84.200.70.40 Destination IP 91.239.100.100 Destination IP 84.200.70.40 -
Reads runtime system information 1 IoCs
Reads data from /proc virtual filesystem.
description ioc /proc/ /proc/