Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2584e2dad6...ad.elf

debian-9-mipsel

7

Analysis

  • max time kernel
    90s
  • max time network
    125s
  • platform
    debian-9_mipsel
  • resource
    debian9-mipsel-20221111-en
  • resource tags

    arch:mipselimage:debian9-mipsel-20221111-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem
  • submitted
    16/04/2023, 08:26

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    2584e2dad6a0f9a02d131bbff22711ad.elf

  • Size

    161KB

  • MD5

    2584e2dad6a0f9a02d131bbff22711ad

  • SHA1

    9863e62bcdd0d9db3361c161f64445d2d51e052c

  • SHA256

    c0c8e830c120c8d6d3dbc5cbafb8b373b46909254826a7ad6486a55b63d5a2e7

  • SHA512

    0a19b59ae56bfcd4060419a3175c05a57e9912f4dc6544ea75190c69827de47c9b65d4dcfa947964bbe8a2e46a7b82e89440199418875fb87fb66a5c5e5181c5

  • SSDEEP

    3072:kc//MM6SLIa5M65etJ8au49QuhsRufcOBGqNjfiUfnLdJiBeGW:kc//WSLIaO65etJ8au4lJnMqNjfiUfnz

Score
7/10
persistence

Malware Config

Signatures

  • Modifies rc script 1 TTPs 1 IoCs

    Adding/modifying system rc scripts is a common persistence mechanism.

    persistence
  • Reads system routing table 1 TTPs 1 IoCs

    Gets active network interfaces from /proc virtual filesystem.

  • Reads system network configuration 1 TTPs 1 IoCs

    Uses contents of /proc filesystem to enumerate network settings.

Processes

  • /tmp/2584e2dad6a0f9a02d131bbff22711ad.elf
    /tmp/2584e2dad6a0f9a02d131bbff22711ad.elf
    1⤵
    • Modifies rc script
    • Reads system routing table
    • Reads system network configuration
    PID:326

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads