Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

3a8a0912ca...dd29ab

debian-9-armhf

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3a8a0912cad301e9fbd922cec3dd29ab

  • Size

    174KB

  • Sample

    231219-2yl3jagahk

  • MD5

    3a8a0912cad301e9fbd922cec3dd29ab

  • SHA1

    c50cd282f158500aadffa9661aca58961098e2b4

  • SHA256

    90b159f774fd8cf994611198fbafd4755a1d2d7b9f05e82124b57ca3afdccd42

  • SHA512

    b61c02af03cc5e69076c72714e113b2fc4355f3f75a20523c344b0017de3a06ad814502c2d397deb587fc1060e4c2ad2dc1a0d8321d7b0342596498da8c7f7ac

  • SSDEEP

    3072:He1ywfQgR7Ee5+iQjne1al8/a/N3BJdfVHmk7A3qunWmgcygSw2EZAi:HMElXe1aYaxdfVHmLqunWmgcygSw2EZB

Score
10/10
gafgytdiscovery

Malware Config

Targets

    • Target

      3a8a0912cad301e9fbd922cec3dd29ab

    • Size

      174KB

    • MD5

      3a8a0912cad301e9fbd922cec3dd29ab

    • SHA1

      c50cd282f158500aadffa9661aca58961098e2b4

    • SHA256

      90b159f774fd8cf994611198fbafd4755a1d2d7b9f05e82124b57ca3afdccd42

    • SHA512

      b61c02af03cc5e69076c72714e113b2fc4355f3f75a20523c344b0017de3a06ad814502c2d397deb587fc1060e4c2ad2dc1a0d8321d7b0342596498da8c7f7ac

    • SSDEEP

      3072:He1ywfQgR7Ee5+iQjne1al8/a/N3BJdfVHmk7A3qunWmgcygSw2EZAi:HMElXe1aYaxdfVHmLqunWmgcygSw2EZB

    Score
    9/10
    discovery

    • Contacts a large (68447) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Changes its process name

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks