Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    151s
  • max time network
    153s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20230831-en
  • resource tags

    arch:armhfimage:debian9-armhf-20230831-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    07/10/2023, 12:01 UTC

General

  • Target

    2bf8619215e2c564cee9a7aafab6694cd1f23911b0852285dbf35874091ed514.elf

  • Size

    175KB

  • MD5

    57e2b6062192e93646cd64d6c0b774b8

  • SHA1

    7fe6d7c8794a77a162b81bc15f10da7191013f72

  • SHA256

    2bf8619215e2c564cee9a7aafab6694cd1f23911b0852285dbf35874091ed514

  • SHA512

    5d895adbae72827de75143cf301d08fc3c8afd42291823c15aeee91de0e46fd2d5cc72599876ec467233144f34e3733dc00873737072596c2924fb4c5ed91a2a

  • SSDEEP

    3072:nS/NsChjlvbAmfkIaboVSyckpj/HS0Bpxi/hJjogM/RXC/Ht6:nS/7lvlcIaboVS7kVdBHi/XMgM/RXC/0

Score
7/10

Malware Config

Signatures

  • Changes its process name 1 IoCs
  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Reads runtime system information 64 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • /tmp/2bf8619215e2c564cee9a7aafab6694cd1f23911b0852285dbf35874091ed514.elf
    /tmp/2bf8619215e2c564cee9a7aafab6694cd1f23911b0852285dbf35874091ed514.elf
    1⤵
    • Changes its process name
    PID:367

Network

  • flag-us
    DNS
    bot.ddosvps.cc
    Remote address:
    8.8.8.8:53
    Request
    bot.ddosvps.cc
    IN A
    Response
    bot.ddosvps.cc
    IN A
    107.174.93.107
  • flag-us
    DNS
    bot.ddosvps.cc
    Remote address:
    8.8.8.8:53
    Request
    bot.ddosvps.cc
    IN A
    Response
    bot.ddosvps.cc
    IN A
    107.174.93.107
  • flag-us
    DNS
    bot.ddosvps.cc
    Remote address:
    8.8.8.8:53
    Request
    bot.ddosvps.cc
    IN A
    Response
    bot.ddosvps.cc
    IN A
    107.174.93.107
  • flag-us
    DNS
    bot.ddosvps.cc
    Remote address:
    8.8.8.8:53
    Request
    bot.ddosvps.cc
    IN A
    Response
    bot.ddosvps.cc
    IN A
    107.174.93.107
  • flag-us
    DNS
    bot.ddosvps.cc
    Remote address:
    8.8.8.8:53
    Request
    bot.ddosvps.cc
    IN A
    Response
    bot.ddosvps.cc
    IN A
    107.174.93.107
  • flag-us
    DNS
    bot.ddosvps.cc
    Remote address:
    8.8.8.8:53
    Request
    bot.ddosvps.cc
    IN A
    Response
    bot.ddosvps.cc
    IN A
    107.174.93.107
  • flag-us
    DNS
    bot.ddosvps.cc
    Remote address:
    8.8.8.8:53
    Request
    bot.ddosvps.cc
    IN A
    Response
    bot.ddosvps.cc
    IN A
    107.174.93.107
  • flag-us
    DNS
    bot.ddosvps.cc
    Remote address:
    8.8.8.8:53
    Request
    bot.ddosvps.cc
    IN A
    Response
    bot.ddosvps.cc
    IN A
    107.174.93.107
  • flag-us
    DNS
    bot.ddosvps.cc
    Remote address:
    8.8.8.8:53
    Request
    bot.ddosvps.cc
    IN A
    Response
    bot.ddosvps.cc
    IN A
    107.174.93.107
  • flag-us
    DNS
    bot.ddosvps.cc
    Remote address:
    8.8.8.8:53
    Request
    bot.ddosvps.cc
    IN A
    Response
    bot.ddosvps.cc
    IN A
    107.174.93.107
  • flag-us
    DNS
    bot.ddosvps.cc
    Remote address:
    8.8.8.8:53
    Request
    bot.ddosvps.cc
    IN A
    Response
    bot.ddosvps.cc
    IN A
    107.174.93.107
  • flag-us
    DNS
    bot.ddosvps.cc
    Remote address:
    8.8.8.8:53
    Request
    bot.ddosvps.cc
    IN A
    Response
    bot.ddosvps.cc
    IN A
    107.174.93.107
  • flag-us
    DNS
    bot.ddosvps.cc
    Remote address:
    8.8.8.8:53
    Request
    bot.ddosvps.cc
    IN A
    Response
    bot.ddosvps.cc
    IN A
    107.174.93.107
  • flag-us
    DNS
    bot.ddosvps.cc
    Remote address:
    8.8.8.8:53
    Request
    bot.ddosvps.cc
    IN A
    Response
    bot.ddosvps.cc
    IN A
    107.174.93.107
  • flag-us
    DNS
    bot.ddosvps.cc
    Remote address:
    8.8.8.8:53
    Request
    bot.ddosvps.cc
    IN A
    Response
    bot.ddosvps.cc
    IN A
    107.174.93.107
  • flag-us
    DNS
    bot.ddosvps.cc
    Remote address:
    8.8.8.8:53
    Request
    bot.ddosvps.cc
    IN A
    Response
    bot.ddosvps.cc
    IN A
    107.174.93.107
  • flag-us
    DNS
    bot.ddosvps.cc
    Remote address:
    8.8.8.8:53
    Request
    bot.ddosvps.cc
    IN A
    Response
    bot.ddosvps.cc
    IN A
    107.174.93.107
  • flag-us
    DNS
    bot.ddosvps.cc
    Remote address:
    8.8.8.8:53
    Request
    bot.ddosvps.cc
    IN A
    Response
    bot.ddosvps.cc
    IN A
    107.174.93.107
  • flag-us
    DNS
    bot.ddosvps.cc
    Remote address:
    8.8.8.8:53
    Request
    bot.ddosvps.cc
    IN A
    Response
    bot.ddosvps.cc
    IN A
    107.174.93.107
  • flag-us
    DNS
    bot.ddosvps.cc
    Remote address:
    8.8.8.8:53
    Request
    bot.ddosvps.cc
    IN A
    Response
    bot.ddosvps.cc
    IN A
    107.174.93.107
  • flag-us
    DNS
    bot.ddosvps.cc
    Remote address:
    8.8.8.8:53
    Request
    bot.ddosvps.cc
    IN A
    Response
    bot.ddosvps.cc
    IN A
    107.174.93.107
  • flag-us
    DNS
    bot.ddosvps.cc
    Remote address:
    8.8.8.8:53
    Request
    bot.ddosvps.cc
    IN A
    Response
    bot.ddosvps.cc
    IN A
    107.174.93.107
  • flag-us
    DNS
    bot.ddosvps.cc
    Remote address:
    8.8.8.8:53
    Request
    bot.ddosvps.cc
    IN A
    Response
    bot.ddosvps.cc
    IN A
    107.174.93.107
  • flag-us
    DNS
    bot.ddosvps.cc
    Remote address:
    8.8.8.8:53
    Request
    bot.ddosvps.cc
    IN A
    Response
    bot.ddosvps.cc
    IN A
    107.174.93.107
  • flag-us
    DNS
    bot.ddosvps.cc
    Remote address:
    8.8.8.8:53
    Request
    bot.ddosvps.cc
    IN A
    Response
    bot.ddosvps.cc
    IN A
    107.174.93.107
  • 107.174.93.107:43957
    bot.ddosvps.cc
    60 B
    1
  • 107.174.93.107:43957
    bot.ddosvps.cc
    60 B
    1
  • 107.174.93.107:43957
    bot.ddosvps.cc
    60 B
    1
  • 107.174.93.107:43957
    bot.ddosvps.cc
    60 B
    1
  • 107.174.93.107:43957
    bot.ddosvps.cc
    60 B
    1
  • 107.174.93.107:43957
    bot.ddosvps.cc
    60 B
    1
  • 107.174.93.107:43957
    bot.ddosvps.cc
    60 B
    1
  • 107.174.93.107:43957
    bot.ddosvps.cc
    60 B
    1
  • 107.174.93.107:43957
    bot.ddosvps.cc
    60 B
    1
  • 107.174.93.107:43957
    bot.ddosvps.cc
    60 B
    1
  • 107.174.93.107:43957
    bot.ddosvps.cc
    60 B
    1
  • 107.174.93.107:43957
    bot.ddosvps.cc
    60 B
    1
  • 107.174.93.107:43957
    bot.ddosvps.cc
    60 B
    1
  • 107.174.93.107:43957
    bot.ddosvps.cc
    60 B
    1
  • 107.174.93.107:43957
    bot.ddosvps.cc
    60 B
    1
  • 107.174.93.107:43957
    bot.ddosvps.cc
    60 B
    1
  • 107.174.93.107:43957
    bot.ddosvps.cc
    60 B
    1
  • 107.174.93.107:43957
    bot.ddosvps.cc
    60 B
    1
  • 107.174.93.107:43957
    bot.ddosvps.cc
    60 B
    1
  • 107.174.93.107:43957
    bot.ddosvps.cc
    60 B
    1
  • 107.174.93.107:43957
    bot.ddosvps.cc
    60 B
    1
  • 107.174.93.107:43957
    bot.ddosvps.cc
    60 B
    1
  • 107.174.93.107:43957
    bot.ddosvps.cc
    60 B
    1
  • 107.174.93.107:43957
    bot.ddosvps.cc
    60 B
    1
  • 107.174.93.107:43957
    bot.ddosvps.cc
    60 B
    1
  • 8.8.8.8:53
    bot.ddosvps.cc
    dns
    60 B
    76 B
    1
    1

    DNS Request

    bot.ddosvps.cc

    DNS Response

    107.174.93.107

  • 8.8.8.8:53
    bot.ddosvps.cc
    dns
    60 B
    76 B
    1
    1

    DNS Request

    bot.ddosvps.cc

    DNS Response

    107.174.93.107

  • 8.8.8.8:53
    bot.ddosvps.cc
    dns
    60 B
    76 B
    1
    1

    DNS Request

    bot.ddosvps.cc

    DNS Response

    107.174.93.107

  • 8.8.8.8:53
    bot.ddosvps.cc
    dns
    60 B
    76 B
    1
    1

    DNS Request

    bot.ddosvps.cc

    DNS Response

    107.174.93.107

  • 8.8.8.8:53
    bot.ddosvps.cc
    dns
    60 B
    76 B
    1
    1

    DNS Request

    bot.ddosvps.cc

    DNS Response

    107.174.93.107

  • 8.8.8.8:53
    bot.ddosvps.cc
    dns
    60 B
    76 B
    1
    1

    DNS Request

    bot.ddosvps.cc

    DNS Response

    107.174.93.107

  • 8.8.8.8:53
    bot.ddosvps.cc
    dns
    60 B
    76 B
    1
    1

    DNS Request

    bot.ddosvps.cc

    DNS Response

    107.174.93.107

  • 8.8.8.8:53
    bot.ddosvps.cc
    dns
    60 B
    76 B
    1
    1

    DNS Request

    bot.ddosvps.cc

    DNS Response

    107.174.93.107

  • 8.8.8.8:53
    bot.ddosvps.cc
    dns
    60 B
    76 B
    1
    1

    DNS Request

    bot.ddosvps.cc

    DNS Response

    107.174.93.107

  • 8.8.8.8:53
    bot.ddosvps.cc
    dns
    60 B
    76 B
    1
    1

    DNS Request

    bot.ddosvps.cc

    DNS Response

    107.174.93.107

  • 8.8.8.8:53
    bot.ddosvps.cc
    dns
    60 B
    76 B
    1
    1

    DNS Request

    bot.ddosvps.cc

    DNS Response

    107.174.93.107

  • 8.8.8.8:53
    bot.ddosvps.cc
    dns
    60 B
    76 B
    1
    1

    DNS Request

    bot.ddosvps.cc

    DNS Response

    107.174.93.107

  • 8.8.8.8:53
    bot.ddosvps.cc
    dns
    60 B
    76 B
    1
    1

    DNS Request

    bot.ddosvps.cc

    DNS Response

    107.174.93.107

  • 8.8.8.8:53
    bot.ddosvps.cc
    dns
    60 B
    76 B
    1
    1

    DNS Request

    bot.ddosvps.cc

    DNS Response

    107.174.93.107

  • 8.8.8.8:53
    bot.ddosvps.cc
    dns
    60 B
    76 B
    1
    1

    DNS Request

    bot.ddosvps.cc

    DNS Response

    107.174.93.107

  • 8.8.8.8:53
    bot.ddosvps.cc
    dns
    60 B
    76 B
    1
    1

    DNS Request

    bot.ddosvps.cc

    DNS Response

    107.174.93.107

  • 8.8.8.8:53
    bot.ddosvps.cc
    dns
    60 B
    76 B
    1
    1

    DNS Request

    bot.ddosvps.cc

    DNS Response

    107.174.93.107

  • 8.8.8.8:53
    bot.ddosvps.cc
    dns
    60 B
    76 B
    1
    1

    DNS Request

    bot.ddosvps.cc

    DNS Response

    107.174.93.107

  • 8.8.8.8:53
    bot.ddosvps.cc
    dns
    60 B
    76 B
    1
    1

    DNS Request

    bot.ddosvps.cc

    DNS Response

    107.174.93.107

  • 8.8.8.8:53
    bot.ddosvps.cc
    dns
    60 B
    76 B
    1
    1

    DNS Request

    bot.ddosvps.cc

    DNS Response

    107.174.93.107

  • 8.8.8.8:53
    bot.ddosvps.cc
    dns
    60 B
    76 B
    1
    1

    DNS Request

    bot.ddosvps.cc

    DNS Response

    107.174.93.107

  • 8.8.8.8:53
    bot.ddosvps.cc
    dns
    60 B
    76 B
    1
    1

    DNS Request

    bot.ddosvps.cc

    DNS Response

    107.174.93.107

  • 8.8.8.8:53
    bot.ddosvps.cc
    dns
    60 B
    76 B
    1
    1

    DNS Request

    bot.ddosvps.cc

    DNS Response

    107.174.93.107

  • 8.8.8.8:53
    bot.ddosvps.cc
    dns
    60 B
    76 B
    1
    1

    DNS Request

    bot.ddosvps.cc

    DNS Response

    107.174.93.107

  • 8.8.8.8:53
    bot.ddosvps.cc
    dns
    60 B
    76 B
    1
    1

    DNS Request

    bot.ddosvps.cc

    DNS Response

    107.174.93.107

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.