Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
0s -
max time network
103s -
platform
linux_amd64 -
resource
ubuntu1804-amd64-en-20211208 -
resource tags
-
submitted
28/09/2022, 13:48
General
-
Target
bruteratel/adaptiveC2/proxylistener.py
-
Size
2KB
-
MD5
0c14628d61b5052fc464bb356f0dbad1
-
SHA1
08439cf282a0dc521157374c35bf5606e22ade92
-
SHA256
6ca25aefe22dee53506d311579e2d86852da14d5c3cc1b722f9a1af9ab384188
-
SHA512
3882593e899b625d28e1c9f309b238200d4e9878a50149c457a428324af6253aaa21d86b0577733b99ff924fad5d301d896f9fe26905ac8f51a53bf6f646f01e
Score
9/10
Malware Config
Signatures
-
Writes file to system bin folder 1 TTPs 1 IoCs
-
Write file to user bin folder 1 TTPs 1 IoCs
-
Reads runtime system information 3 IoCs
Reads data from /proc virtual filesystem.
-
Writes file to tmp directory 2 IoCs
Malware often drops required files in the /tmp directory.
Processes
-
/tmp/bruteratel/adaptiveC2/proxylistener.py/tmp/bruteratel/adaptiveC2/proxylistener.py1⤵
- Write file to user bin folder
- Reads runtime system information
- Writes file to tmp directory
-
/sbin/ldconfig/sbin/ldconfig -p2⤵
- Writes file to system bin folder
-
-
/sbin/ldconfig.real/sbin/ldconfig.real -p2⤵
-
-
/bin/sh/bin/sh -c "uname -p 2> /dev/null"2⤵
-
/bin/unameuname -p3⤵
-
-