Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    144s
  • max time network
    155s
  • platform
    ubuntu-18.04_amd64
  • resource
    ubuntu1804-amd64-20231215-en
  • resource tags

    arch:amd64arch:i386image:ubuntu1804-amd64-20231215-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
  • submitted
    19/12/2023, 22:57

General

  • Target

    37bdb0f8baaf5ae1b3bc10e2a5de5d3e

  • Size

    123KB

  • MD5

    37bdb0f8baaf5ae1b3bc10e2a5de5d3e

  • SHA1

    f40075585a3157af34a137384a744f1da6c0d7ed

  • SHA256

    4645b797647a43d7555d44a79320f70a763840adc7bd2ed608671244a57e7ec5

  • SHA512

    4c745436fea78ab9aa7c4928d09c94572fc3feb31a6f4086c852cfccfaf019f34bb56b5ecf6afc90122b6c379203e85b31387406abea6c1bcd91277844309c64

  • SSDEEP

    3072:n1gWGjebR3ARqVRU4WEO6XAyFLnhuAr+lC7SdVnhGHSp5O:Dt0uRWVXkAlC7SdVnhGHSp5O

Score
7/10

Malware Config

Signatures

  • Changes its process name 1 IoCs
  • Reads system routing table 1 TTPs 1 IoCs

    Gets active network interfaces from /proc virtual filesystem.

  • Reads system network configuration 1 TTPs 1 IoCs

    Uses contents of /proc filesystem to enumerate network settings.

Processes

  • /tmp/37bdb0f8baaf5ae1b3bc10e2a5de5d3e
    /tmp/37bdb0f8baaf5ae1b3bc10e2a5de5d3e
    1⤵
    • Changes its process name
    • Reads system routing table
    • Reads system network configuration
    PID:1531

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads