Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

cfa4a11b0d...25.elf

ubuntu-18.04-amd64

7

Analysis

  • max time kernel
    40058s
  • max time network
    153s
  • platform
    linux_amd64
  • resource
    ubuntu1804-amd64-en-20211208
  • resource tags

    arch:amd64arch:i386image:ubuntu1804-amd64-en-20211208kernel:4.15.0-161-genericlocale:en-usos:ubuntu-18.04-amd64system
  • submitted
    17/03/2023, 08:02

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    cfa4a11b0d522b95a6abfbaae9b98a60a5db7d276a515635876f1076b9d74425.elf

  • Size

    91KB

  • MD5

    d47a3eeda787a4c35dd4bafc3be727d4

  • SHA1

    b7e5561e6f361dfe2e42202a913e5cecc6956eab

  • SHA256

    cfa4a11b0d522b95a6abfbaae9b98a60a5db7d276a515635876f1076b9d74425

  • SHA512

    a2ebec73329fb9351e53c8d2abffb3c5b683738d448bab63929649238ec479e897aa15d0a4c83fc0965223ba8fd419db7e8a38961370f2c0091a6af6172408dc

  • SSDEEP

    1536:p7rHXokXsWFVSzkfLEkZAT5ipG5v3QphauH/SPNlDDUg6I9um2Xj5YZb0e:pcCPOkfQfNipGdQphaE/AVog99um2XFY

Score
7/10

Malware Config

Signatures

  • Reads system routing table 1 TTPs 1 IoCs

    Gets active network interfaces from /proc virtual filesystem.

  • Reads system network configuration 1 TTPs 1 IoCs

    Uses contents of /proc filesystem to enumerate network settings.

Processes

  • /tmp/cfa4a11b0d522b95a6abfbaae9b98a60a5db7d276a515635876f1076b9d74425.elf
    /tmp/cfa4a11b0d522b95a6abfbaae9b98a60a5db7d276a515635876f1076b9d74425.elf
    1⤵
    • Reads system routing table
    • Reads system network configuration
    PID:576

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads