Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2c7cea0349...cbb14d

debian-9-armhf

7

Analysis

  • max time kernel
    122s
  • max time network
    124s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20231215-en
  • resource tags

    arch:armhfimage:debian9-armhf-20231215-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    19/12/2023, 22:50

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    2c7cea0349edc9616b8e41e902cbb14d

  • Size

    168KB

  • MD5

    2c7cea0349edc9616b8e41e902cbb14d

  • SHA1

    3d47825c9b15e78d632bdf99dc0d9ac2a9a4f5fb

  • SHA256

    88f876017b9e5b8b639da0a465c68c343d9061563b5ecc5f2722e43c9946b674

  • SHA512

    940ce8ec3a94d7cb2bbdf67d5c7682fdceb86eebad78662576058cc6369717a5e12c28f8fa1bdac992e43b7dee60c2a9e1d77d41ed2c49b7ee56697c26ab4bb9

  • SSDEEP

    3072:cTSMGRopVpweQ+x+mikaW8uOLGArPqiqZTetJ8add9QzhsR8PwPWmaF2RYNmyUQs:0x+mraJu1CqisetJ8addQ48PwPWmomys

Score
7/10

Malware Config

Signatures

  • Changes its process name 1 IoCs
  • Reads system routing table 1 TTPs 1 IoCs

    Gets active network interfaces from /proc virtual filesystem.

  • Reads system network configuration 1 TTPs 1 IoCs

    Uses contents of /proc filesystem to enumerate network settings.

Processes

  • /tmp/2c7cea0349edc9616b8e41e902cbb14d
    /tmp/2c7cea0349edc9616b8e41e902cbb14d
    1⤵
    • Changes its process name
    • Reads system routing table
    • Reads system network configuration
    PID:650

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads