Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

85a70a197a...d2d174

debian-9-armhf

7

Analysis

  • max time kernel
    144s
  • max time network
    155s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20231215-en
  • resource tags

    arch:armhfimage:debian9-armhf-20231215-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    20/12/2023, 04:57

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    85a70a197afdf487ed24e354b8d2d174

  • Size

    184KB

  • MD5

    85a70a197afdf487ed24e354b8d2d174

  • SHA1

    787f0588e09789fab3172a0e51280c8e0a74bf2f

  • SHA256

    dbfd4095f388e9efdf300e37e6a4a397b7f8713ecffcdcd4d241dcc05b0a680a

  • SHA512

    e6537716639a102e03198bba1dd262e0c3a0a73ec97fdd0317b79578d3402146b096e0fcea1cc7d7001594dbcaa0a09f34fdb7e8d235dc8b28a6af3834cb3752

  • SSDEEP

    3072:XWn4fGXq11zXqwL5SKNZf1t3aLUUGPNCibtNf8eNgJs12Ohvc5PsEsEUxxQLgJlT:X6hvUBl9hObA5QXoO5Dt0DR1M4X

Score
7/10

Malware Config

Signatures

  • Changes its process name 1 IoCs
  • Reads system routing table 1 TTPs 1 IoCs

    Gets active network interfaces from /proc virtual filesystem.

  • Reads system network configuration 1 TTPs 1 IoCs

    Uses contents of /proc filesystem to enumerate network settings.

Processes

  • /tmp/85a70a197afdf487ed24e354b8d2d174
    /tmp/85a70a197afdf487ed24e354b8d2d174
    1⤵
    • Changes its process name
    • Reads system routing table
    • Reads system network configuration
    PID:673

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads