Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
151s -
max time network
155s -
platform
debian-9_mipsel -
resource
debian9-mipsel-20231215-en -
resource tags
arch:mipselimage:debian9-mipsel-20231215-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem -
submitted
19/12/2023, 22:35
Behavioral task
behavioral1
Sample
15fa2ce3991607a73c6a27332f0953ef
Resource
debian9-mipsel-20231215-en
4 signatures
150 seconds
General
-
Target
15fa2ce3991607a73c6a27332f0953ef
-
Size
147KB
-
MD5
15fa2ce3991607a73c6a27332f0953ef
-
SHA1
0b7c95ad99b0ee5f9bbe73b1c8c73efd74ffb9d5
-
SHA256
7a0d812bf848d6bcfe2cd969b838692b3fe74b875b06344b252d16d9e2a9518f
-
SHA512
7abcaf997b21228b17849a90f989f8288fdac363350707c6f0be01130b65ac5f1604d7fdbdad869dd899f76f4279cda79b4a02533a4d214dfe966317bf60f6b7
-
SSDEEP
3072:zmpDghqvUKYuJCGC4ef253rMGVR7zIj1jr:zmpDghqhVJCGC4efQ3rMGVR7zIj1jr
Score
7/10
Malware Config
Signatures
-
Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself aeeaev9efuaubyepxx 718 15fa2ce3991607a73c6a27332f0953ef -
Deletes itself 1 IoCs
pid Process 718 15fa2ce3991607a73c6a27332f0953ef -
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
description ioc Process File opened for reading /proc/net/route 15fa2ce3991607a73c6a27332f0953ef -
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
description ioc Process File opened for reading /proc/net/route 15fa2ce3991607a73c6a27332f0953ef