Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    4s
  • max time network
    7s
  • platform
    ubuntu-18.04_amd64
  • resource
    ubuntu1804-amd64-20231215-en
  • resource tags

    arch:amd64arch:i386image:ubuntu1804-amd64-20231215-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
  • submitted
    19/12/2023, 23:00 UTC

Errors

Reason
Payload did not run: payload error: fork/exec /tmp/3b9e6cacf57b3b8ace777d587feef00e: exec format error

General

  • Target

    3b9e6cacf57b3b8ace777d587feef00e

  • Size

    42KB

  • MD5

    3b9e6cacf57b3b8ace777d587feef00e

  • SHA1

    fc1f0115eb81eb560b7175bd5b8b77884eaecb76

  • SHA256

    782b130731aa38edde1a831fff058322bae7f08f0586334e7b8f519658d17371

  • SHA512

    3f1294290531b91cc150e395c182a1482f7671285ffb49654ad0f17342b20fcc0015b692801b909d97a89b994e8f0e4eafabe0c2c09c3a62b9316c5b70e4fe76

  • SSDEEP

    768:Alvcoih3sY4SFtdqpLF7O6SlWByTOer2XwtBm1R/:9ocTMByNBTOeSXwt6/

Score
1/10

Malware Config

Signatures

Processes

  • /tmp/3b9e6cacf57b3b8ace777d587feef00e
    /tmp/3b9e6cacf57b3b8ace777d587feef00e
    1⤵
      PID:1540

    Network

    • flag-us
      DNS
      cdn.fwupd.org
      Remote address:
      1.1.1.1:53
      Request
      cdn.fwupd.org
      IN A
      Response
      cdn.fwupd.org
      IN CNAME
      dualstack.p2.shared.global.fastly.net
      dualstack.p2.shared.global.fastly.net
      IN A
      151.101.2.49
      dualstack.p2.shared.global.fastly.net
      IN A
      151.101.194.49
      dualstack.p2.shared.global.fastly.net
      IN A
      151.101.66.49
      dualstack.p2.shared.global.fastly.net
      IN A
      151.101.130.49
    • flag-us
      DNS
      cdn.fwupd.org
      Remote address:
      1.1.1.1:53
      Request
      cdn.fwupd.org
      IN AAAA
      Response
      cdn.fwupd.org
      IN CNAME
      dualstack.p2.shared.global.fastly.net
      dualstack.p2.shared.global.fastly.net
      IN AAAA
      2a04:4e42:600::561
      dualstack.p2.shared.global.fastly.net
      IN AAAA
      2a04:4e42:400::561
      dualstack.p2.shared.global.fastly.net
      IN AAAA
      2a04:4e42:200::561
      dualstack.p2.shared.global.fastly.net
      IN AAAA
      2a04:4e42::561
    • 151.101.130.49:443
      tls, https
      268 B
      40 B
      1
      1
    • 151.101.130.49:443
      cdn.fwupd.org
      tls
      8.2kB
      1.0MB
      140
      756
    • 151.101.193.91:443
      tls
      127 B
      40 B
      2
      1
    • 89.187.167.8:443
      tls
      187 B
      3
    • 224.0.0.251:5353
      73 B
      1
    • 1.1.1.1:53
      cdn.fwupd.org
      dns
      70 B
      185 B
      1
      1

      DNS Request

      cdn.fwupd.org

      DNS Response

      151.101.2.49
      151.101.194.49
      151.101.66.49
      151.101.130.49

    • 1.1.1.1:53
      cdn.fwupd.org
      dns
      70 B
      233 B
      1
      1

      DNS Request

      cdn.fwupd.org

      DNS Response

      2a04:4e42:600::561
      2a04:4e42:400::561
      2a04:4e42:200::561
      2a04:4e42::561

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    We care about your privacy.

    This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.