Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
143s -
max time network
154s -
platform
debian-9_armhf -
resource
debian9-armhf-20231215-en -
resource tags
arch:armhfimage:debian9-armhf-20231215-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem -
submitted
20/12/2023, 05:39
Behavioral task
behavioral1
Sample
885ca300b9e1a5c3e546082eb913d55f
Resource
debian9-armhf-20231215-en
2 signatures
150 seconds
General
-
Target
885ca300b9e1a5c3e546082eb913d55f
-
Size
147KB
-
MD5
885ca300b9e1a5c3e546082eb913d55f
-
SHA1
ac354947aaa792087d3d179eea024e8540a41537
-
SHA256
95424b9917e28a4e25dcd3d0f72a38e41590d9d126655e52bcca59e2409517fd
-
SHA512
e2937d1dcf0dd0efe0b8d6db21cee9a5fcbaf5c229fbde193bd0b450264615504b0324aa0c598cc36c0a5ad720930008136931f49754d72a9feacf6722ccdf6b
-
SSDEEP
3072:jXSJRLX5Z953MNaNBkB/N6uNQ8M/9YDppN1mQwfCcQMAN:DSJRLP9BMNa8hN6ajM/9YDptmQwfCzMq
Score
6/10
Malware Config
Signatures
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
description ioc Process File opened for reading /proc/net/route 885ca300b9e1a5c3e546082eb913d55f -
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
description ioc Process File opened for reading /proc/net/route 885ca300b9e1a5c3e546082eb913d55f