Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
0s -
max time network
161s -
platform
linux_armhf -
resource
debian9-armhf-en-20211208 -
resource tags
arch:armhfimage:debian9-armhf-en-20211208kernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem -
submitted
31/07/2022, 22:37
Behavioral task
behavioral1
Sample
5db5fc6bc58bea2897f6911cc9ae37c0db6c8430c4c7e816fe4a6bebe889e9fb
Resource
debian9-armhf-en-20211208
3 signatures
150 seconds
General
-
Target
5db5fc6bc58bea2897f6911cc9ae37c0db6c8430c4c7e816fe4a6bebe889e9fb
-
Size
142KB
-
MD5
26e621cf27a2db514ec901919fec4ff4
-
SHA1
778a2dbcd38ce7f0ea5267d4ae26f631f81a6db2
-
SHA256
5db5fc6bc58bea2897f6911cc9ae37c0db6c8430c4c7e816fe4a6bebe889e9fb
-
SHA512
d3d029b1a0d0f1e1d19093878f2136cbb0274a13941a27ae11f290bb40b039e59b49c18be933383fb40457448219f86cec2e6de2adc526a2a633e9138acadf89
Score
9/10
Malware Config
Signatures
-
Creates a large amount of network flows 1 TTPs
This may indicate a network scan to discover remotely running services.
-
Modifies hosts file 1 IoCs
Adds to hosts file used for mapping hosts to IP addresses.
description ioc /etc/hosts /etc/hosts -
Writes DNS configuration 1 TTPs 1 IoCs
Writes data to DNS resolver config file.
description ioc /etc/resolv.conf /etc/resolv.conf