Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    151s
  • max time network
    155s
  • platform
    debian-9_mipsel
  • resource
    debian9-mipsel-20231215-en
  • resource tags

    arch:mipselimage:debian9-mipsel-20231215-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem
  • submitted
    19/12/2023, 22:35

General

  • Target

    15fa2ce3991607a73c6a27332f0953ef

  • Size

    147KB

  • MD5

    15fa2ce3991607a73c6a27332f0953ef

  • SHA1

    0b7c95ad99b0ee5f9bbe73b1c8c73efd74ffb9d5

  • SHA256

    7a0d812bf848d6bcfe2cd969b838692b3fe74b875b06344b252d16d9e2a9518f

  • SHA512

    7abcaf997b21228b17849a90f989f8288fdac363350707c6f0be01130b65ac5f1604d7fdbdad869dd899f76f4279cda79b4a02533a4d214dfe966317bf60f6b7

  • SSDEEP

    3072:zmpDghqvUKYuJCGC4ef253rMGVR7zIj1jr:zmpDghqhVJCGC4efQ3rMGVR7zIj1jr

Score
7/10

Malware Config

Signatures

  • Changes its process name 1 IoCs
  • Deletes itself 1 IoCs
  • Reads system routing table 1 TTPs 1 IoCs

    Gets active network interfaces from /proc virtual filesystem.

  • Reads system network configuration 1 TTPs 1 IoCs

    Uses contents of /proc filesystem to enumerate network settings.

Processes

  • /tmp/15fa2ce3991607a73c6a27332f0953ef
    /tmp/15fa2ce3991607a73c6a27332f0953ef
    1⤵
    • Changes its process name
    • Deletes itself
    • Reads system routing table
    • Reads system network configuration
    PID:718

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads