Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    147s
  • max time network
    150s
  • platform
    debian-9_mipsel
  • resource
    debian9-mipsel-20231215-en
  • resource tags

    arch:mipselimage:debian9-mipsel-20231215-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem
  • submitted
    19/12/2023, 22:43

General

  • Target

    214dcbf028dd72b6a62701df23634101

  • Size

    176KB

  • MD5

    214dcbf028dd72b6a62701df23634101

  • SHA1

    a3ab3611556d0ba69dd7df99e5901f4f83680448

  • SHA256

    203bf793572d5d1b64c36098b5448f1eaab67c3bb711b5e6001f0a0e8f71bb9d

  • SHA512

    e261927bbb454eea1d591ef7220d0b3bc9296b06df17b1f56dd441763e50bb2c476bb11f8a1840a3dadeca92a4e65064e2de717d69b25e9566d3b68769d8db6c

  • SSDEEP

    1536:+iW5X8eTF0oZXkuj0RKTLy6Zj/yaMCfJe14N3kVwnb2bk+Knmyf+3VsqDpyik8s:zVwLzecIINCyf+lsqDpyik8s

Score
7/10

Malware Config

Signatures

  • Changes its process name 1 IoCs
  • Reads system routing table 1 TTPs 1 IoCs

    Gets active network interfaces from /proc virtual filesystem.

  • Reads system network configuration 1 TTPs 1 IoCs

    Uses contents of /proc filesystem to enumerate network settings.

Processes

  • /tmp/214dcbf028dd72b6a62701df23634101
    /tmp/214dcbf028dd72b6a62701df23634101
    1⤵
    • Changes its process name
    • Reads system routing table
    • Reads system network configuration
    PID:709

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads