Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2609fffe70...9405bd

debian-9-armhf

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2609fffe70fa613805f9a24f289405bd

  • Size

    174KB

  • Sample

    231219-2pypzafhf7

  • MD5

    2609fffe70fa613805f9a24f289405bd

  • SHA1

    fae65d6c7cf8b87aaa6487d55383bacb89c3a519

  • SHA256

    f846e9337020c62d9201ce945ecfe4d6486258c46787e74b7944bec76627c02b

  • SHA512

    62e447b0ef2a2c950ed3f96a0598ff881478a90175a534910c5047e7dd816f4c6d9d810d1cd062a3e89936f82993089a3feffbce43b379f4f206480111920258

  • SSDEEP

    3072:Pe1ywfQgR7Ee5ZiI/naVa1w/O/N2B1dO2HqsX43mGnWmgcygSw2EZAi:PMEyjaVa8OwdO2HqvmGnWmgcygSw2EZB

Score
10/10
gafgytdiscovery

Malware Config

Targets

    • Target

      2609fffe70fa613805f9a24f289405bd

    • Size

      174KB

    • MD5

      2609fffe70fa613805f9a24f289405bd

    • SHA1

      fae65d6c7cf8b87aaa6487d55383bacb89c3a519

    • SHA256

      f846e9337020c62d9201ce945ecfe4d6486258c46787e74b7944bec76627c02b

    • SHA512

      62e447b0ef2a2c950ed3f96a0598ff881478a90175a534910c5047e7dd816f4c6d9d810d1cd062a3e89936f82993089a3feffbce43b379f4f206480111920258

    • SSDEEP

      3072:Pe1ywfQgR7Ee5ZiI/naVa1w/O/N2B1dO2HqsX43mGnWmgcygSw2EZAi:PMEyjaVa8OwdO2HqvmGnWmgcygSw2EZB

    Score
    9/10
    discovery

    • Contacts a large (67827) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Changes its process name

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks