Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    4s
  • max time network
    131s
  • platform
    ubuntu-18.04_amd64
  • resource
    ubuntu1804-amd64-20231026-en
  • resource tags

    arch:amd64arch:i386image:ubuntu1804-amd64-20231026-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
  • submitted
    13/11/2023, 05:00

General

  • Target

    sqlmap/extra/beep/beep.py

  • Size

    2KB

  • MD5

    4a290e0a32d8ada4403c82ee7ba7b059

  • SHA1

    35e93b1a923abb40a6c1256fb869d131f171fe06

  • SHA256

    dd403056ebe223999e1fdb12eea83b221481c1a6fec0840f2d5562ca176e7435

  • SHA512

    e294ffa25e591e72dc683925d67513a6422caae94dcd3715ee5b14cdd942e6eb3ac641d8557e929d3512aee81ce512aa208984825a430417905ba088e2b3dba7

Score
3/10

Malware Config

Signatures

  • Reads runtime system information 2 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • /tmp/sqlmap/extra/beep/beep.py
    /tmp/sqlmap/extra/beep/beep.py
    1⤵
      PID:1527
    • /usr/local/sbin/python
      python /tmp/sqlmap/extra/beep/beep.py
      1⤵
        PID:1527
      • /usr/local/bin/python
        python /tmp/sqlmap/extra/beep/beep.py
        1⤵
          PID:1527
        • /usr/sbin/python
          python /tmp/sqlmap/extra/beep/beep.py
          1⤵
            PID:1527
          • /usr/bin/python
            python /tmp/sqlmap/extra/beep/beep.py
            1⤵
            • Reads runtime system information
            PID:1527
            • /bin/sh
              sh -c "aplay '/tmp/sqlmap/extra/beep/beep.wav' 2>/dev/null"
              2⤵
                PID:1528
                • /usr/bin/aplay
                  aplay /tmp/sqlmap/extra/beep/beep.wav
                  3⤵
                    PID:1529
                • /bin/sh
                  sh -c "paplay '/tmp/sqlmap/extra/beep/beep.wav' 2>/dev/null"
                  2⤵
                    PID:1530
                    • /usr/bin/paplay
                      paplay /tmp/sqlmap/extra/beep/beep.wav
                      3⤵
                        PID:1534
                    • /bin/sh
                      sh -c "play '/tmp/sqlmap/extra/beep/beep.wav' 2>/dev/null"
                      2⤵
                        PID:1535

                    Network

                    MITRE ATT&CK Matrix

                    Replay Monitor

                    Loading Replay Monitor...

                    Downloads