Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    124s
  • max time network
    142s
  • platform
    ubuntu-18.04_amd64
  • resource
    ubuntu1804-amd64-20231215-en
  • resource tags

    arch:amd64arch:i386image:ubuntu1804-amd64-20231215-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
  • submitted
    20/12/2023, 06:43

General

  • Target

    8c99fa22b92f842fb015aa15ad656228

  • Size

    92KB

  • MD5

    8c99fa22b92f842fb015aa15ad656228

  • SHA1

    53b1eb188823ff55586ff4a87b738bb24bbd22b4

  • SHA256

    c116f0db081cdb1f3fc34bba8a4fa136c969bef824d3953ea588a0b5b67a460a

  • SHA512

    ed4aa95c2bb444f56338a8b0ccf190bb32117bc813cddfefe050d6783ebc9404fa0af9d6d47df5250070b62f56eab41a7473b53c1a62317462b3f990dac3602a

  • SSDEEP

    1536:0yXDP3ZhUNUPXPKmY5aC/Qdk5cc/z4d7J2cNU5mZ5hpo7w882PM37K8PN2UrYe:vXj7UNUPX5Y5JQdScc7M7JFp5hp4w88F

Score
7/10

Malware Config

Signatures

  • Changes its process name 1 IoCs
  • Deletes itself 1 IoCs
  • Reads system routing table 1 TTPs 1 IoCs

    Gets active network interfaces from /proc virtual filesystem.

  • Reads system network configuration 1 TTPs 1 IoCs

    Uses contents of /proc filesystem to enumerate network settings.

Processes

  • /tmp/8c99fa22b92f842fb015aa15ad656228
    /tmp/8c99fa22b92f842fb015aa15ad656228
    1⤵
    • Changes its process name
    • Deletes itself
    • Reads system routing table
    • Reads system network configuration
    PID:1547

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads