Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
36750s -
max time network
149s -
platform
linux_armhf -
resource
debian9-armhf-en-20211208 -
resource tags
arch:armhfimage:debian9-armhf-en-20211208kernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem -
submitted
07/02/2023, 01:19
Behavioral task
behavioral1
Sample
e5f68e1d47924f62c28d795e9f1f9c28.elf
Resource
debian9-armhf-en-20211208
2 signatures
150 seconds
General
-
Target
e5f68e1d47924f62c28d795e9f1f9c28.elf
-
Size
146KB
-
MD5
e5f68e1d47924f62c28d795e9f1f9c28
-
SHA1
6199623f5f54a166e5f52e10e4ee73d467fcb515
-
SHA256
49113bfb946d435fb6c0be900ef205b122721ead99b40d099149047728046d1d
-
SHA512
83dd39859d07f0629fc36783d584faae72eea19a54565f29f8becd2f8410ebdd59e1e6d74a57b31c44c3ce3dad7610e0aab111e3a387f373e31432f1f1cf7f71
-
SSDEEP
3072:bjjMM7NwA7VWxbZaXmpvh7q07ly/V7l0sgURKXmQwfHcQrAN:bPMM7NZ7QZZawp+07ly/V7+XmQwfHzrq
Score
7/10
Malware Config
Signatures
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
description ioc Process /proc/net/route /proc/net/route e5f68e1d47924f62c28d795e9f1f9c28.elf -
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
description ioc Process /proc/net/route /proc/net/route e5f68e1d47924f62c28d795e9f1f9c28.elf