Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
148s -
max time network
152s -
platform
debian-9_armhf -
resource
debian9-armhf-20231215-en -
resource tags
arch:armhfimage:debian9-armhf-20231215-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem -
submitted
20/12/2023, 00:06
Behavioral task
behavioral1
Sample
718105f3577cf87fb76f5577744edfe4
Resource
debian9-armhf-20231215-en
2 signatures
150 seconds
General
-
Target
718105f3577cf87fb76f5577744edfe4
-
Size
88KB
-
MD5
718105f3577cf87fb76f5577744edfe4
-
SHA1
3020b14b0788b816df2e91e7c88f51539c0c7f94
-
SHA256
220e5d1e6ef99d2e6864d505a22c210a3957f54d468ed0b1b61ee79d2aaa2a83
-
SHA512
b526a974c36e7cca22af86fd8f8e14dca17aa9defbb0b43ba11f6dcf32955cf5309600e32c517f9cf8dff88c609d88a12d55844b64ef8e443f389f8b65554909
-
SSDEEP
1536:KeCWdR00boWGmYVTOiInnHWjqUdXz7mko/uyuHmZaqQ4KkJRE3bj:dY03YEn0qmz7mkQuyemZaqQ4KoRE3bj
Score
6/10
Malware Config
Signatures
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
description ioc Process File opened for reading /proc/net/route 718105f3577cf87fb76f5577744edfe4 -
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
description ioc Process File opened for reading /proc/net/route 718105f3577cf87fb76f5577744edfe4