Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

controlloi...er.zip

windows7-x64

1

controlloi...er.zip

windows10-2004-x64

1

controlloi...ignore

windows7-x64

3

controlloi...ignore

windows10-2004-x64

3

controlloi...ICENSE

windows7-x64

1

controlloi...ICENSE

windows10-2004-x64

1

controlloi...DME.md

windows7-x64

3

controlloi...DME.md

windows10-2004-x64

3

controlloi...andler

ubuntu-18.04-amd64

1

controlloi...art.sh

ubuntu-18.04-amd64

3

controlloi...art.sh

debian-9-armhf

3

controlloi...art.sh

debian-9-mips

3

controlloi...art.sh

debian-9-mipsel

3

controlloi....rules

windows7-x64

3

controlloi....rules

windows10-2004-x64

3

controlloi...tup.sh

ubuntu-18.04-amd64

3

controlloi...tup.sh

debian-9-armhf

3

controlloi...tup.sh

debian-9-mips

3

controlloi...tup.sh

debian-9-mipsel

3

controlloi...HANGES

windows7-x64

1

controlloi...HANGES

windows10-2004-x64

1

controlloi...DME.js

windows7-x64

1

controlloi...DME.js

windows10-2004-x64

1

controlloi...ocketd

ubuntu-18.04-amd64

3

controlloi...ce.dll

windows7-x64

1

controlloi...ce.dll

windows10-2004-x64

1

controlloi...er.exe

windows7-x64

1

controlloi...er.exe

windows10-2004-x64

1

controlloi...rt.bat

windows7-x64

7

controlloi...rt.bat

windows10-2004-x64

7

controlloi...te.exe

windows7-x64

1

controlloi...te.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    4s
  • max time network
    1121s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20221111-en
  • resource tags

    arch:armhfimage:debian9-armhf-20221111-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    01/07/2023, 15:36

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    controlloid-server-master/dist/linux/udev/setup.sh

  • Size

    522B

  • MD5

    3d0bfa2ea4db769f3324fb598a2e1453

  • SHA1

    79a9f29340c57867609f781f6fa5bb718ef311dd

  • SHA256

    02315d910ffdbe191b83ee512d7ee324c99e624885ceb67c703f91a03f1c2488

  • SHA512

    bbafa0e4dc0897d79442dd625a0f229174cc1e13c86ef3beffb76f40477e33dfcec36fe513eb6edd69e0059d5d39d6eb6467828c904c77f496808b74f9af6b6c

Score
3/10

Malware Config

Signatures

  • Reads runtime system information 1 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • /tmp/controlloid-server-master/dist/linux/udev/setup.sh
    /tmp/controlloid-server-master/dist/linux/udev/setup.sh
    1⤵
      PID:358
    • /usr/local/sbin/bash
      bash /tmp/controlloid-server-master/dist/linux/udev/setup.sh
      1⤵
        PID:358
      • /usr/local/bin/bash
        bash /tmp/controlloid-server-master/dist/linux/udev/setup.sh
        1⤵
          PID:358
        • /usr/sbin/bash
          bash /tmp/controlloid-server-master/dist/linux/udev/setup.sh
          1⤵
            PID:358
          • /usr/bin/bash
            bash /tmp/controlloid-server-master/dist/linux/udev/setup.sh
            1⤵
              PID:358
            • /sbin/bash
              bash /tmp/controlloid-server-master/dist/linux/udev/setup.sh
              1⤵
                PID:358
              • /bin/bash
                bash /tmp/controlloid-server-master/dist/linux/udev/setup.sh
                1⤵
                  PID:358
                  • /usr/bin/dirname
                    dirname /tmp/controlloid-server-master/dist/linux/udev/setup.sh
                    2⤵
                      PID:359
                    • /usr/bin/id
                      id -u
                      2⤵
                      • Reads runtime system information
                      PID:361

                  Network

                  MITRE ATT&CK Matrix

                  Replay Monitor

                  Loading Replay Monitor...

                  Downloads