Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

21636e4749...6815e8

debian-9-armhf

6

Analysis

  • max time kernel
    148s
  • max time network
    151s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20231215-en
  • resource tags

    arch:armhfimage:debian9-armhf-20231215-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    19/12/2023, 22:43

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    21636e4749bc32706980ef433f6815e8

  • Size

    92KB

  • MD5

    21636e4749bc32706980ef433f6815e8

  • SHA1

    a1d234813c55ff7bb20cd7db45cd45e3b3d1f390

  • SHA256

    db861bbf6ec4940b4f24e8bb26c55f4269eec4ff3bdcdc520148f2e26cb8fa10

  • SHA512

    82366eb45c4f855a7e68691a35dc828f4188ca8e583350616a8faac36427c290de134138b46874dfe1ec5c7c1bc8386224c744b98ac221038817faf151e9873a

  • SSDEEP

    1536:2PxMBXWNHvIw+bbIxQOPkjOzGRXAUCiVkGn7XCxHmun4UmFqEriXlK+:pBXyHIfIWjbRDCimGnTMm84UmFqyiXlZ

Score
6/10

Malware Config

Signatures

  • Reads system routing table 1 TTPs 1 IoCs

    Gets active network interfaces from /proc virtual filesystem.

  • Reads system network configuration 1 TTPs 1 IoCs

    Uses contents of /proc filesystem to enumerate network settings.

Processes

  • /tmp/21636e4749bc32706980ef433f6815e8
    /tmp/21636e4749bc32706980ef433f6815e8
    1⤵
    • Reads system routing table
    • Reads system network configuration
    PID:651

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads