Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2.sh
-
Size
18KB
-
Sample
231002-h5hh5sga9y
-
MD5
77e3046e6271f2871ed34497a06ce770
-
SHA1
b0a6bd77c3371ff4be33ba5070aa486204853b0b
-
SHA256
cda6a3a92d746c0be30c1809c15b2f5e344b724dcecbda7729234a798fb5218b
-
SHA512
49072c85b82cd494a7fa55172bc4f012b4f63e096d075cd8ec15aa8f037443408ce516e885f1c54cf65ee617a807adaf2634d3508017a790be40012ba819c7b5
-
SSDEEP
192:7jQ04oGAuVvZ7U3voFUzcF1pNbHqbbA8g5ugdjqDWThOAaI1cnUeGy3K1ywOK:7jpmVCYUw3MbA5WS09QuUeGyJTK
Static task
static1
Behavioral task
behavioral1
Sample
2.sh
Resource
ubuntu1804-amd64-en-20211208
Behavioral task
behavioral2
Sample
2.sh
Resource
debian9-armhf-20230831-en
Behavioral task
behavioral3
Sample
2.sh
Resource
debian9-mipsbe-20230831-en
Behavioral task
behavioral4
Sample
2.sh
Resource
debian9-mipsel-20230831-en
Malware Config
Targets
-
-
Target
2.sh
-
Size
18KB
-
MD5
77e3046e6271f2871ed34497a06ce770
-
SHA1
b0a6bd77c3371ff4be33ba5070aa486204853b0b
-
SHA256
cda6a3a92d746c0be30c1809c15b2f5e344b724dcecbda7729234a798fb5218b
-
SHA512
49072c85b82cd494a7fa55172bc4f012b4f63e096d075cd8ec15aa8f037443408ce516e885f1c54cf65ee617a807adaf2634d3508017a790be40012ba819c7b5
-
SSDEEP
192:7jQ04oGAuVvZ7U3voFUzcF1pNbHqbbA8g5ugdjqDWThOAaI1cnUeGy3K1ywOK:7jpmVCYUw3MbA5WS09QuUeGyJTK
Score9/10-
Modifies the dynamic linker configuration file
Malware can modify the configuration file of the dynamic linker to preload malicous libraries with every executed process.
-
Changes its process name
-
Flushes firewall rules
Flushes/ disables firewall rules inside the Linux kernel.
-
Attempts to change immutable files
Modifies inode attributes on the filesystem to allow changing of immutable files.
-
Creates/modifies Cron job
Cron allows running tasks on a schedule, and is commonly used for malware persistence.
-
Creates/modifies environment variables
Creating/modifying environment variables is a common persistence mechanism.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Reads CPU attributes
-
Writes file to system bin folder
-
Modifies Bash startup script
-