Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
151s -
max time network
150s -
platform
debian-9_mipsel -
resource
debian9-mipsel-20231215-en -
resource tags
arch:mipselimage:debian9-mipsel-20231215-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem -
submitted
20/12/2023, 03:38
Behavioral task
behavioral1
Sample
819d362840a1da8d8db9ccd3c028aeef
Resource
debian9-mipsel-20231215-en
1 signatures
150 seconds
General
-
Target
819d362840a1da8d8db9ccd3c028aeef
-
Size
70KB
-
MD5
819d362840a1da8d8db9ccd3c028aeef
-
SHA1
f368fc73f30bd2aef074f002873e822fbef45b6a
-
SHA256
330fb97b3bcb3db9272b8416c5f41cb9fa14b167b2e0523b0646b136a1c70d9e
-
SHA512
f50bc89438f2d43f53adac97c6d3dce5ee6252a770a5aa29f2d8dd7e7c081850320a26f3c5ebfb54e9b2d424b35764ad681e5668072f153704571a5b3ba756d8
-
SSDEEP
1536:HhGY5fPrEdMbUHyFs4vV07V7GGaQon2qIhklQa6qY8wkOSuaYsGFt24K3s1Zoy+9:Hda9dDon2qIhklQa6qY8wkOSuak1O0
Score
7/10
Malware Config
Signatures
-
Unexpected DNS network traffic destination 17 IoCs
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
description ioc Destination IP 84.200.69.80 Destination IP 84.200.69.80 Destination IP 84.200.70.40 Destination IP 84.200.69.80 Destination IP 84.200.70.40 Destination IP 84.200.70.40 Destination IP 84.200.70.40 Destination IP 84.200.69.80 Destination IP 84.200.69.80 Destination IP 84.200.69.80 Destination IP 84.200.70.40 Destination IP 91.239.100.100 Destination IP 84.200.69.80 Destination IP 84.200.69.80 Destination IP 91.239.100.100 Destination IP 84.200.69.80 Destination IP 84.200.69.80