Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

566ca0edfa...ea.elf

debian-9-mips

7

Analysis

  • max time kernel
    41156s
  • max time network
    149s
  • platform
    linux_mips
  • resource
    debian9-mipsbe-en-20211208
  • resource tags

    arch:mipsimage:debian9-mipsbe-en-20211208kernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
  • submitted
    30/03/2023, 01:19

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    566ca0edfa417e0bb85d9efb319d41e2ea5bef8a72b640378c8b4989a5e46cea.elf

  • Size

    110KB

  • MD5

    439c029f7356c1fe468e14d1d66d8b99

  • SHA1

    cb34dbb98f0e244294a481b598413a774f23caa4

  • SHA256

    566ca0edfa417e0bb85d9efb319d41e2ea5bef8a72b640378c8b4989a5e46cea

  • SHA512

    fc560184b7e3f5d4366d7d21aa4c263d0d58dea6b4f10e1950f238e9d94db0837f32e9dc75cdd2861e8f979164e1b7054769db7248043e3a18b43eeecda65b3d

  • SSDEEP

    1536:f7jB1T12qu/XYi+0i5M2rKnYiy3A7uXZzg3vCaI1e05/xLfgm1+XFBk/1P2wv:ZL4+0iWYzz4qaID5/dgm1+XFBktP2wv

Score
7/10

Malware Config

Signatures

  • Reads system routing table 1 TTPs 1 IoCs

    Gets active network interfaces from /proc virtual filesystem.

  • Reads system network configuration 1 TTPs 1 IoCs

    Uses contents of /proc filesystem to enumerate network settings.

Processes

  • /tmp/566ca0edfa417e0bb85d9efb319d41e2ea5bef8a72b640378c8b4989a5e46cea.elf
    /tmp/566ca0edfa417e0bb85d9efb319d41e2ea5bef8a72b640378c8b4989a5e46cea.elf
    1⤵
    • Reads system routing table
    • Reads system network configuration
    PID:324

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads