Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

7586b23cdc...5d2bcc

debian-9-armhf

7

Analysis

  • max time kernel
    143s
  • max time network
    155s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20231215-en
  • resource tags

    arch:armhfimage:debian9-armhf-20231215-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    20/12/2023, 00:36

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    7586b23cdc4195d299eedde0375d2bcc

  • Size

    184KB

  • MD5

    7586b23cdc4195d299eedde0375d2bcc

  • SHA1

    0debb385536049fdb93ce081c3be2fe589b458ae

  • SHA256

    eb5255b8eb88ce29bb3e13bc5c794bab2a347ecbba0e90c4296deaf31269c67d

  • SHA512

    f919564f89c3d04aba199dde86baad0d7729158335264069209d515163d8f5a64404d38243d4cf78467f21216c1bc165f495f3a969153181f3d9e6f1d9fea517

  • SSDEEP

    3072:BhG4IGXq11zXqwL5S5NZf1t3aLUUGPNZibtNf8eNgJs12Zhvc5PsEsEUxxQLzJlM:BUPzfkn9D8xrbY11EoO5Dt0DR1M4X

Score
7/10

Malware Config

Signatures

  • Changes its process name 1 IoCs
  • Reads system routing table 1 TTPs 1 IoCs

    Gets active network interfaces from /proc virtual filesystem.

  • Reads system network configuration 1 TTPs 1 IoCs

    Uses contents of /proc filesystem to enumerate network settings.

Processes

  • /tmp/7586b23cdc4195d299eedde0375d2bcc
    /tmp/7586b23cdc4195d299eedde0375d2bcc
    1⤵
    • Changes its process name
    • Reads system routing table
    • Reads system network configuration
    PID:675

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads