Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
142s -
max time network
147s -
platform
debian-9_mipsel -
resource
debian9-mipsel-20231215-en -
resource tags
arch:mipselimage:debian9-mipsel-20231215-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem -
submitted
20/12/2023, 04:17
Behavioral task
behavioral1
Sample
8374e72b37b8a4ea5d5d4da3e529c614
Resource
debian9-mipsel-20231215-en
3 signatures
150 seconds
General
-
Target
8374e72b37b8a4ea5d5d4da3e529c614
-
Size
164KB
-
MD5
8374e72b37b8a4ea5d5d4da3e529c614
-
SHA1
beff7943bf9345f9db07823d78064cb8bf15aa08
-
SHA256
20153ce89cefee8f423cb7cd3e76a7fd1cfd1409e35cfbf3e221ceab4d00c979
-
SHA512
fd1a18fb87b245ee416336b6273a65bd8fa3d1b8beaec84ec5d9a3b006710dd64b170b476947ba2b570733f797fcf64820dff78a5e139a898e9a59e6796216eb
-
SSDEEP
3072:8V1d9bu3fgN40494myJESpLSrldQnqSZocH0B:8VZS3fly1pLSrldQnqSZocH0B
Score
7/10
Malware Config
Signatures
-
Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself sshd 703 8374e72b37b8a4ea5d5d4da3e529c614 -
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
description ioc Process File opened for reading /proc/net/route 8374e72b37b8a4ea5d5d4da3e529c614 -
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
description ioc Process File opened for reading /proc/net/route 8374e72b37b8a4ea5d5d4da3e529c614