Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

1

eeccf51bb2...ddd6ab

ubuntu-18.04-amd64

7

eeccf51bb2...ddd6ab

debian-9-armhf

7

eeccf51bb2...ddd6ab

debian-9-mips

7

eeccf51bb2...ddd6ab

debian-9-mipsel

7

Analysis

  • max time kernel
    152s
  • max time network
    153s
  • platform
    ubuntu-18.04_amd64
  • resource
    ubuntu1804-amd64-20221125-en
  • resource tags

    arch:amd64arch:i386image:ubuntu1804-amd64-20221125-enkernel:4.15.0-161-genericlocale:en-usos:ubuntu-18.04-amd64system
  • submitted
    15/05/2023, 12:28

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    eeccf51bb2274f325ca54ae3f9ebe857e0ddd6ab

  • Size

    41KB

  • MD5

    b9e02521a0bb96eb0528c170770a0c2d

  • SHA1

    eeccf51bb2274f325ca54ae3f9ebe857e0ddd6ab

  • SHA256

    bb4c8ee23103cd57741a1008552dae1038c17c505dd16f80571d795d91892cad

  • SHA512

    6ecd57b14e5377c880d759979d0c3f461ed93a2f2c4ab69dfb3a550e973460e769c453d1ff38efe9d5e0c4aba43cddcf90bb5ff5a1e9b8dbb54095c3c688c6ba

  • SSDEEP

    384:l0FINvSo5o/Ds3oIywe4Xz2Ye6rDBzgHZ4zRZn7hElu/tOJJJ2JJJuOfvuy/97MA:qCv3oIywe4Xz2YeIDBzgHShFMSZf

Score
7/10
persistence

Malware Config

Signatures

  • Changes its process name 1 IoCs
  • Creates/modifies Cron job 1 TTPs 1 IoCs

    Cron allows running tasks on a schedule, and is commonly used for malware persistence.

    persistence
  • Writes file to tmp directory 1 IoCs

    Malware often drops required files in the /tmp directory.

Processes

  • /tmp/eeccf51bb2274f325ca54ae3f9ebe857e0ddd6ab
    /tmp/eeccf51bb2274f325ca54ae3f9ebe857e0ddd6ab
    1⤵
    • Changes its process name
    PID:608
  • sh
    sh -c "echo '* * * * * /tmp/eeccf51bb2274f325ca54ae3f9ebe857e0ddd6ab' >> newcrontab ; crontab newcrontab; rm -fr newcrontab"
    1⤵
    • Writes file to tmp directory
    PID:611
    • crontab
      crontab newcrontab
      2⤵
      • Creates/modifies Cron job
      PID:615
    • rm
      rm -fr newcrontab
      2⤵
        PID:616

    Network

    MITRE ATT&CK Enterprise v6

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /tmp/newcrontab
      Filesize

      56B

      MD5

      36a15ca328f6f858509d4c27ae7246ec

      SHA1

      7c279b68431e8fb049a5644dbf36dd1b0ace7b58

      SHA256

      53e802c281234769526fe2d9470664467f533d092c0126e423bedba7a7c6efbf

      SHA512

      568c11275e2240618b99924ff8416044d8e1a032e6a9a29d938850157923acf85e820cccd2125be938b9c1a30347919c552721d26dbe14e4f059af2a34dd400a

      Download Submit

    • /var/spool/cron/crontabs/tmp.FBVg34
      Filesize

      240B

      MD5

      5dc9133918c4ad9f1bd48032835b80fe

      SHA1

      c27ce8f03288bedf244d0ded7bd735d66aa24ef3

      SHA256

      8cbf75a1c2f36b91ecbec9235df2dae099cc61c608a4a7ef2d0f8116442d96f1

      SHA512

      5300a1e1631811ca8c8d71b260c20e9479a8ce49e76f16925f03a670e35133dc12e6746b2866e82e02cc12c9abe711ac852435dee87d9b3788e4535dd3eb59b2

      Download Submit