Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    7s
  • max time network
    1221s
  • platform
    linux_mipsel
  • resource
    debian9-mipsel-en-20211208
  • resource tags

    arch:mipselimage:debian9-mipsel-en-20211208kernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem
  • submitted
    01/07/2023, 15:36

General

  • Target

    controlloid-server-master/dist/linux/start.sh

  • Size

    414B

  • MD5

    9b9aa7636bdb1df9e7da45fe72a29c71

  • SHA1

    b4f9643ed86ba2821b57d468467afa38d2bbf40b

  • SHA256

    62d7f98315d09ca7fd0e3b2bc34c831bd5fac624988485674a005f9ebc81d375

  • SHA512

    60673902da5b2bc899934aa72ec4c4e044cfb86a6119287cc0d05a98fbf43e75b2edbfa62bebe5d378a487b455bfd408769555f9995cb664cf4a4f06d34bcb9c

Score
3/10

Malware Config

Signatures

  • Reads runtime system information 1 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • /tmp/controlloid-server-master/dist/linux/start.sh
    /tmp/controlloid-server-master/dist/linux/start.sh
    1⤵
      PID:329
    • /usr/local/sbin/bash
      bash /tmp/controlloid-server-master/dist/linux/start.sh
      1⤵
        PID:329
      • /usr/local/bin/bash
        bash /tmp/controlloid-server-master/dist/linux/start.sh
        1⤵
          PID:329
        • /usr/sbin/bash
          bash /tmp/controlloid-server-master/dist/linux/start.sh
          1⤵
            PID:329
          • /usr/bin/bash
            bash /tmp/controlloid-server-master/dist/linux/start.sh
            1⤵
              PID:329
            • /sbin/bash
              bash /tmp/controlloid-server-master/dist/linux/start.sh
              1⤵
                PID:329
              • /bin/bash
                bash /tmp/controlloid-server-master/dist/linux/start.sh
                1⤵
                  PID:329
                  • /usr/bin/dirname
                    dirname /tmp/controlloid-server-master/dist/linux/start.sh
                    2⤵
                      PID:331
                    • /sbin/ip
                      ip -4 -o addr show scope global
                      2⤵
                        PID:336
                      • /usr/bin/awk
                        awk "{gsub(/\\/.*/,\"\",\$4); print \$2, \"http://\"\$4\":31415/\"}"
                        2⤵
                          PID:337
                        • /usr/bin/sort
                          sort
                          2⤵
                            PID:338
                          • /bin/sed
                            sed "s/\\(http.\\+\\)/\\1/"
                            2⤵
                            • Reads runtime system information
                            PID:339
                          • /tmp/controlloid-server-master/dist/linux/websocketd/websocketd
                            ./websocketd/websocketd --binary --port 31415 "--staticdir=." ./bin/ws_handler
                            2⤵
                              PID:340

                          Network

                          MITRE ATT&CK Matrix

                          Replay Monitor

                          Loading Replay Monitor...

                          Downloads