Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
151s -
max time network
156s -
platform
debian-9_armhf -
resource
debian9-armhf-20231215-en -
resource tags
arch:armhfimage:debian9-armhf-20231215-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem -
submitted
19/12/2023, 22:31
Behavioral task
behavioral1
Sample
104a7ba48e86e2e43f6d7f3bd7350a34
Resource
debian9-armhf-20231215-en
1 signatures
150 seconds
General
-
Target
104a7ba48e86e2e43f6d7f3bd7350a34
-
Size
53KB
-
MD5
104a7ba48e86e2e43f6d7f3bd7350a34
-
SHA1
de3b26743c684d0de30edb35a0bab6e3a5f05f1a
-
SHA256
c9c2a759c2904406d6fa4f754ada5869e1699dcc836ad04ec42701067d184076
-
SHA512
cdc73dd536bc8605bec89ad0e9fe1b363a2712f03a74461af63a61c3894ecf786dc60b11d99f07331b2bd9ed549bfd7eea00f3195bd13455d867449912196a85
-
SSDEEP
1536:dOOjYJFQyIa8yWXCDiHYT62S+WHGD34lh/fhZsdiu+yHm:8OjYJCla8yb62S+WHNZfrsA
Score
7/10
Malware Config
Signatures
-
Unexpected DNS network traffic destination 25 IoCs
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
description ioc Destination IP 84.200.69.80 Destination IP 84.200.69.80 Destination IP 84.200.69.80 Destination IP 84.200.69.80 Destination IP 84.200.70.40 Destination IP 84.200.70.40 Destination IP 91.239.100.100 Destination IP 84.200.70.40 Destination IP 91.239.100.100 Destination IP 84.200.69.80 Destination IP 91.239.100.100 Destination IP 84.200.70.40 Destination IP 91.239.100.100 Destination IP 84.200.70.40 Destination IP 84.200.69.80 Destination IP 84.200.69.80 Destination IP 84.200.69.80 Destination IP 91.239.100.100 Destination IP 84.200.70.40 Destination IP 84.200.69.80 Destination IP 84.200.70.40 Destination IP 84.200.70.40 Destination IP 84.200.70.40 Destination IP 84.200.69.80 Destination IP 84.200.70.40