Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
142s -
max time network
148s -
platform
debian-9_mips -
resource
debian9-mipsbe-20231215-en -
resource tags
arch:mipsimage:debian9-mipsbe-20231215-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem -
submitted
19/12/2023, 22:47
Behavioral task
behavioral1
Sample
2775d6e404a975c58019ba0a72fd8f1c
Resource
debian9-mipsbe-20231215-en
3 signatures
150 seconds
General
-
Target
2775d6e404a975c58019ba0a72fd8f1c
-
Size
177KB
-
MD5
2775d6e404a975c58019ba0a72fd8f1c
-
SHA1
ab012bdd5c366a54284e18e21e96bfe950906f39
-
SHA256
c2b437907b9774d87f6370acc146bea332744e02640be60850d40e7dd49a4dbb
-
SHA512
3c3e981c4ce7e6328ebf72c6af44230e1978706b43963d7f9548ff77e30624a312dd4c2fe67dd50f27f2525f9179e8c4f69dfa0642fab3c391893ec5f56409c4
-
SSDEEP
1536:q9emxwLw3oJuilCSiFalM4hRE7jM9Wr496fcBODw1S3721oLWBkXitADuJvag9uE:2hq9lA2sZpZdSQHuyfi4YqLRT3Kdh
Score
7/10
Malware Config
Signatures
-
Changes its process name 1 IoCs
description pid Process Changes the process name, possibly in an attempt to hide itself 706 2775d6e404a975c58019ba0a72fd8f1c -
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
description ioc Process File opened for reading /proc/net/route 2775d6e404a975c58019ba0a72fd8f1c -
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
description ioc Process File opened for reading /proc/net/route 2775d6e404a975c58019ba0a72fd8f1c