Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

0d2cd8e326...8207b8

debian-9-mips

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0d2cd8e326941c5a3b2ae4815f8207b8

  • Size

    156KB

  • Sample

    231219-2egnpsbga2

  • MD5

    0d2cd8e326941c5a3b2ae4815f8207b8

  • SHA1

    7f5163770e33d017d94e0d67f95668c0735aa85c

  • SHA256

    db546294501a024ae37ee06319a19692824ad25b02f4813e724146c826e4fa0c

  • SHA512

    c7d10587414dc67b02c46d294ad67f0e427da4462a10c477fcb8593bc01be872d054f3046308060e6ceb262d721aa33ec6eece83be49e70d239ce0a5beb1a99a

  • SSDEEP

    3072:NMVhnf7YLx0Bedi1ebcRg/jJmUlGPaLEgvI6Nb:NonTqgOjJmUlGPaLEgvI6Nb

Score
10/10
gafgytdiscovery

Malware Config

Targets

    • Target

      0d2cd8e326941c5a3b2ae4815f8207b8

    • Size

      156KB

    • MD5

      0d2cd8e326941c5a3b2ae4815f8207b8

    • SHA1

      7f5163770e33d017d94e0d67f95668c0735aa85c

    • SHA256

      db546294501a024ae37ee06319a19692824ad25b02f4813e724146c826e4fa0c

    • SHA512

      c7d10587414dc67b02c46d294ad67f0e427da4462a10c477fcb8593bc01be872d054f3046308060e6ceb262d721aa33ec6eece83be49e70d239ce0a5beb1a99a

    • SSDEEP

      3072:NMVhnf7YLx0Bedi1ebcRg/jJmUlGPaLEgvI6Nb:NonTqgOjJmUlGPaLEgvI6Nb

    Score
    9/10
    discovery

    • Contacts a large (18880) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Changes its process name

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks