Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    148s
  • max time network
    152s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20231215-en
  • resource tags

    arch:armhfimage:debian9-armhf-20231215-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    20/12/2023, 00:06

General

  • Target

    718105f3577cf87fb76f5577744edfe4

  • Size

    88KB

  • MD5

    718105f3577cf87fb76f5577744edfe4

  • SHA1

    3020b14b0788b816df2e91e7c88f51539c0c7f94

  • SHA256

    220e5d1e6ef99d2e6864d505a22c210a3957f54d468ed0b1b61ee79d2aaa2a83

  • SHA512

    b526a974c36e7cca22af86fd8f8e14dca17aa9defbb0b43ba11f6dcf32955cf5309600e32c517f9cf8dff88c609d88a12d55844b64ef8e443f389f8b65554909

  • SSDEEP

    1536:KeCWdR00boWGmYVTOiInnHWjqUdXz7mko/uyuHmZaqQ4KkJRE3bj:dY03YEn0qmz7mkQuyemZaqQ4KoRE3bj

Score
6/10

Malware Config

Signatures

  • Reads system routing table 1 TTPs 1 IoCs

    Gets active network interfaces from /proc virtual filesystem.

  • Reads system network configuration 1 TTPs 1 IoCs

    Uses contents of /proc filesystem to enumerate network settings.

Processes

  • /tmp/718105f3577cf87fb76f5577744edfe4
    /tmp/718105f3577cf87fb76f5577744edfe4
    1⤵
    • Reads system routing table
    • Reads system network configuration
    PID:649

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads