Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

6575a9fb68...9ac02f

debian-9-armhf

7

Analysis

  • max time kernel
    126s
  • max time network
    144s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20231215-en
  • resource tags

    arch:armhfimage:debian9-armhf-20231215-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    19/12/2023, 23:26

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    6575a9fb6879b6004b81f619989ac02f

  • Size

    132KB

  • MD5

    6575a9fb6879b6004b81f619989ac02f

  • SHA1

    3da3beb7d27552c70ae2b421bbdb48fff2cb3a3f

  • SHA256

    44d00046401e6b1656e73d60445b5ea1d25c503dfae9997c8dbe1158a9d312ac

  • SHA512

    5322893a13f428b818aa95e0d3fdc41bcb56e0cab18590dcf057dd574d9612b719c60ce53cc37daccf71a6aa7b32250a928d409889f071aad68f7316265ac485

  • SSDEEP

    3072:e9AS8f554Thdn37awEAh8+setJ8au49QuhsbuvsCvg2S1XxyCQ6rAGFQpXW:pwO+setJ8au4l/LvsXxyCQ6rzFQpXW

Score
7/10

Malware Config

Signatures

  • Changes its process name 1 IoCs
  • Reads system routing table 1 TTPs 1 IoCs

    Gets active network interfaces from /proc virtual filesystem.

  • Reads system network configuration 1 TTPs 1 IoCs

    Uses contents of /proc filesystem to enumerate network settings.

Processes

  • /tmp/6575a9fb6879b6004b81f619989ac02f
    /tmp/6575a9fb6879b6004b81f619989ac02f
    1⤵
    • Changes its process name
    • Reads system routing table
    • Reads system network configuration
    PID:654

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads