Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

e5f68e1d47...28.elf

debian-9-armhf

7

Analysis

  • max time kernel
    36750s
  • max time network
    149s
  • platform
    linux_armhf
  • resource
    debian9-armhf-en-20211208
  • resource tags

    arch:armhfimage:debian9-armhf-en-20211208kernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    07/02/2023, 01:19

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    e5f68e1d47924f62c28d795e9f1f9c28.elf

  • Size

    146KB

  • MD5

    e5f68e1d47924f62c28d795e9f1f9c28

  • SHA1

    6199623f5f54a166e5f52e10e4ee73d467fcb515

  • SHA256

    49113bfb946d435fb6c0be900ef205b122721ead99b40d099149047728046d1d

  • SHA512

    83dd39859d07f0629fc36783d584faae72eea19a54565f29f8becd2f8410ebdd59e1e6d74a57b31c44c3ce3dad7610e0aab111e3a387f373e31432f1f1cf7f71

  • SSDEEP

    3072:bjjMM7NwA7VWxbZaXmpvh7q07ly/V7l0sgURKXmQwfHcQrAN:bPMM7NZ7QZZawp+07ly/V7+XmQwfHzrq

Score
7/10

Malware Config

Signatures

  • Reads system routing table 1 TTPs 1 IoCs

    Gets active network interfaces from /proc virtual filesystem.

  • Reads system network configuration 1 TTPs 1 IoCs

    Uses contents of /proc filesystem to enumerate network settings.

Processes

  • /tmp/e5f68e1d47924f62c28d795e9f1f9c28.elf
    /tmp/e5f68e1d47924f62c28d795e9f1f9c28.elf
    1⤵
    • Reads system routing table
    • Reads system network configuration
    PID:351

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads