Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
115s -
max time network
152s -
platform
linux_mipsel -
resource
debian9-mipsel-en-20211208 -
resource tags
arch:mipselimage:debian9-mipsel-en-20211208kernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem -
submitted
21/04/2023, 15:49
Static task
static1
Behavioral task
behavioral1
Sample
d7b829c0116b1ca8a6866f5cb5d19dda.elf
Resource
debian9-mipsel-en-20211208
1 signatures
150 seconds
General
-
Target
d7b829c0116b1ca8a6866f5cb5d19dda.elf
-
Size
117KB
-
MD5
d7b829c0116b1ca8a6866f5cb5d19dda
-
SHA1
da1eaa2d4d3790401a7486fa885d317319c11801
-
SHA256
237b24da759c22b9970bdce7585b042c5e166cc1591bbd7fe5caa5277b25d492
-
SHA512
9a30a91d3bc663aeef29fff93ea6c843c99c97e050c6638254e3645e4378c508258e83b54520749cbdd31f7cc2a8d9d01aaed06c10d2aed7ac7ceb315536f97b
-
SSDEEP
768:tNNT1Nc12cVJ4vTYAc02GeJy3B2LGFSahPur8zhkbDrjeQ6BN8YJq6J9yx9Ly7Y1:tJ2GrgcubDr6HBN8DCoyEElqXyr
Score
5/10
Malware Config
Signatures
-
Reads runtime system information 3 IoCs
Reads data from /proc virtual filesystem.
description ioc Process /proc/filesystems /proc/filesystems mv /proc/328/exe /proc/328/exe Process not Found /proc/filesystems /proc/filesystems mkdir
Processes
-
/tmp/d7b829c0116b1ca8a6866f5cb5d19dda.elf/tmp/d7b829c0116b1ca8a6866f5cb5d19dda.elf1⤵PID:326
-
/bin/shsh -c "mkdir /f4zu0zmthp/ && >/f4zu0zmthp/f4zu0zmthp && cd /f4zu0zmthp/ >/dev/null"1⤵PID:329
-
/bin/mkdirmkdir /f4zu0zmthp/2⤵
- Reads runtime system information
PID:330
-
-
/bin/shsh -c "mv /tmp/d7b829c0116b1ca8a6866f5cb5d19dda.elf�@ /f4zu0zmthp/f4zu0zmthp && chmod 777 /f4zu0zmthp/f4zu0zmthp >/dev/null"1⤵PID:331
-
/bin/mvmv "/tmp/d7b829c0116b1ca8a6866f5cb5d19dda.elf�@" /f4zu0zmthp/f4zu0zmthp2⤵
- Reads runtime system information
PID:332
-