Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
32784s -
max time network
138s -
platform
linux_mips -
resource
debian9-mipsbe-en-20211208 -
resource tags
arch:mipsimage:debian9-mipsbe-en-20211208kernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem -
submitted
23/12/2022, 03:53
Behavioral task
behavioral1
Sample
788192c4b85c9a3b9485e880b7bc288f.elf
Resource
debian9-mipsbe-en-20211208
debian-9-mips
1 signatures
150 seconds
General
-
Target
788192c4b85c9a3b9485e880b7bc288f.elf
-
Size
58KB
-
MD5
788192c4b85c9a3b9485e880b7bc288f
-
SHA1
8146cc014728395a51fb020bc81a00c2ed64551b
-
SHA256
c2f711a8d55c83f45fe2014d40c77dfbb79831ad20da448971cb57779970e077
-
SHA512
77ee5ab764ec06afd7b8d611c91cd9898f48790111b517a47a868679e3672b1ba53d5f4bb4daa0b55e638e4a590ff21799f0a859e785082c29739314249d8a15
-
SSDEEP
768:bvaLxUxyQpPT5rhmuTrFtqmSnoh2Lt3ug+f1QZi0e4fyMnup//dujgtywCz:bvJFP1ntsF+f1l0lk16gtLy
Score
5/10
Malware Config
Signatures
-
Reads runtime system information 63 IoCs
Reads data from /proc virtual filesystem.
description ioc /proc/20/cmdline /proc/20/cmdline /proc/224/cmdline /proc/224/cmdline /proc/255/cmdline /proc/255/cmdline /proc/11/cmdline /proc/11/cmdline /proc/5/cmdline /proc/5/cmdline /proc/17/cmdline /proc/17/cmdline /proc/76/cmdline /proc/76/cmdline /proc/80/cmdline /proc/80/cmdline /proc/299/cmdline /proc/299/cmdline /proc/3/cmdline /proc/3/cmdline /proc/24/cmdline /proc/24/cmdline /proc/36/cmdline /proc/36/cmdline /proc/82/cmdline /proc/82/cmdline /proc/16/cmdline /proc/16/cmdline /proc/19/cmdline /proc/19/cmdline /proc/322/cmdline /proc/322/cmdline /proc/2/cmdline /proc/2/cmdline /proc/69/cmdline /proc/69/cmdline /proc/70/cmdline /proc/70/cmdline /proc/225/cmdline /proc/225/cmdline /proc/12/cmdline /proc/12/cmdline /proc/72/cmdline /proc/72/cmdline /proc/75/cmdline /proc/75/cmdline /proc/114/cmdline /proc/114/cmdline /proc/207/cmdline /proc/207/cmdline /proc/308/cmdline /proc/308/cmdline /proc/ /proc/ /proc/7/cmdline /proc/7/cmdline /proc/15/cmdline /proc/15/cmdline /proc/18/cmdline /proc/18/cmdline /proc/79/cmdline /proc/79/cmdline /proc/142/cmdline /proc/142/cmdline /proc/226/cmdline /proc/226/cmdline /proc/307/cmdline /proc/307/cmdline /proc/4/cmdline /proc/4/cmdline /proc/251/cmdline /proc/251/cmdline /proc/1/cmdline /proc/1/cmdline /proc/335/cmdline /proc/335/cmdline /proc/144/cmdline /proc/144/cmdline /proc/13/cmdline /proc/13/cmdline /proc/74/cmdline /proc/74/cmdline /proc/115/cmdline /proc/115/cmdline /proc/222/cmdline /proc/222/cmdline /proc/223/cmdline /proc/223/cmdline /proc/9/cmdline /proc/9/cmdline /proc/155/cmdline /proc/155/cmdline /proc/295/cmdline /proc/295/cmdline /proc/353/cmdline /proc/353/cmdline /proc/10/cmdline /proc/10/cmdline /proc/23/cmdline /proc/23/cmdline /proc/77/cmdline /proc/77/cmdline /proc/331/cmdline /proc/331/cmdline /proc/21/cmdline /proc/21/cmdline /proc/327/cmdline /proc/327/cmdline /proc/14/cmdline /proc/14/cmdline /proc/8/cmdline /proc/8/cmdline /proc/37/cmdline /proc/37/cmdline /proc/104/cmdline /proc/104/cmdline /proc/6/cmdline /proc/6/cmdline /proc/73/cmdline /proc/73/cmdline /proc/252/cmdline /proc/252/cmdline /proc/273/cmdline /proc/273/cmdline /proc/22/cmdline /proc/22/cmdline