Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    143s
  • max time network
    154s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20231215-en
  • resource tags

    arch:armhfimage:debian9-armhf-20231215-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    19/12/2023, 23:28

General

  • Target

    688a985d75e80909f96e7724b5eee121

  • Size

    108KB

  • MD5

    688a985d75e80909f96e7724b5eee121

  • SHA1

    a2eb98c92eb73b0214d9542a1bf3f242c0634db5

  • SHA256

    54476f3c59642eec25e8c1d1029ba44a5cb266432bd77d8213d5a2cc87432f2d

  • SHA512

    08d5e0667d37aa9f289b571c0c3cf7c4bd75791629c94643d6490d6a8304267f59b61c5bceb353d5f2d97fbd3a4299fc16acf309d6fbce754d9c1ed07a5e148f

  • SSDEEP

    3072:b6an17WtsWhdgYJw0D6mbPbmTQOWsXAOn:Wan17WPJw0D6ibmTQOWCAOn

Score
6/10

Malware Config

Signatures

  • Reads system routing table 1 TTPs 1 IoCs

    Gets active network interfaces from /proc virtual filesystem.

  • Reads system network configuration 1 TTPs 1 IoCs

    Uses contents of /proc filesystem to enumerate network settings.

Processes

  • /tmp/688a985d75e80909f96e7724b5eee121
    /tmp/688a985d75e80909f96e7724b5eee121
    1⤵
    • Reads system routing table
    • Reads system network configuration
    PID:683

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads