Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

e568228e13...0c.elf

debian-9-armhf

7

Analysis

  • max time kernel
    152s
  • max time network
    154s
  • platform
    linux_armhf
  • resource
    debian9-armhf-en-20211208
  • resource tags

    arch:armhfimage:debian9-armhf-en-20211208kernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    26/04/2023, 07:49

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    e568228e13b2c13e588ecd266dae9b0c.elf

  • Size

    109KB

  • MD5

    e568228e13b2c13e588ecd266dae9b0c

  • SHA1

    6bbc91bed773d2e03cb3a10e9d881b507e48795a

  • SHA256

    d7aab89fdf7fa8b63272472af6b8a1387e6b0f6c5fd47b451abb6e1c22729056

  • SHA512

    940dcd7c79231f662fef11cedd7c88ad3104a79151e4875b395f4fb452b98a3f9c794af4639c87872689a3939eba415978775ef5f18ea9f35ed7431a5baeda25

  • SSDEEP

    3072:EbIl2rZjfa15tdh/ndlV36GuNmPpumAQOqzXczN:EbIatfaTh/ngwumAQOqzczN

Score
7/10

Malware Config

Signatures

  • Reads system routing table 1 TTPs 1 IoCs

    Gets active network interfaces from /proc virtual filesystem.

  • Reads system network configuration 1 TTPs 1 IoCs

    Uses contents of /proc filesystem to enumerate network settings.

Processes

  • /tmp/e568228e13b2c13e588ecd266dae9b0c.elf
    /tmp/e568228e13b2c13e588ecd266dae9b0c.elf
    1⤵
    • Reads system routing table
    • Reads system network configuration
    PID:351

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads