Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    17127s
  • max time network
    162s
  • platform
    linux_armhf
  • resource
    debian9-armhf-en-20211208
  • submitted
    24/06/2022, 22:23

General

  • Target

    a587083ef2c6169e87ba73e9e51f1e78d020b5924e4419fe0ab9527e298562e1

  • Size

    127KB

  • MD5

    8a804570ec5719b5fe18a0948ea4d915

  • SHA1

    c7da0b4134d8ca1baa2d6a77042c3a1ef9aa0f43

  • SHA256

    a587083ef2c6169e87ba73e9e51f1e78d020b5924e4419fe0ab9527e298562e1

  • SHA512

    e9372a5aacc3fee692d954f61492b1bb217d8398af30d63df9451e1420be8e1b717ad01530a113c9c2c12d4e09acebbda81183169c82e25ea7d1c3237910b608

Score
9/10

Malware Config

Signatures

  • Contacts a large (35490) amount of remote hosts 1 TTPs

    This may indicate a network scan to discover remotely running services.

  • Creates a large amount of network flows 1 TTPs

    This may indicate a network scan to discover remotely running services.

  • Unexpected DNS network traffic destination 25 IoCs

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Reads runtime system information 1 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • ./a587083ef2c6169e87ba73e9e51f1e78d020b5924e4419fe0ab9527e298562e1
    ./a587083ef2c6169e87ba73e9e51f1e78d020b5924e4419fe0ab9527e298562e1
    1⤵
      PID:351

    Network

    MITRE ATT&CK Enterprise v6

    Replay Monitor

    Loading Replay Monitor...

    Downloads