Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
142s -
max time network
153s -
platform
debian-9_mips -
resource
debian9-mipsbe-20231215-en -
resource tags
arch:mipsimage:debian9-mipsbe-20231215-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem -
submitted
20/12/2023, 08:09
Static task
static1
Behavioral task
behavioral1
Sample
934e2d08aa3750f141db716c7f70b26b
Resource
debian9-mipsbe-20231215-en
3 signatures
150 seconds
General
-
Target
934e2d08aa3750f141db716c7f70b26b
-
Size
116KB
-
MD5
934e2d08aa3750f141db716c7f70b26b
-
SHA1
8499aa7b06e3b84cfdef4d14dee3318d69ba0c02
-
SHA256
d1bfbfa6f4470c7c6af8461bbc3ec0d6a4c40d51581db76c82ed8606d57421a7
-
SHA512
28718f0537b336ca50360959bb91a03d306e816f3b6971daa3b5cae06a04919b97bf9e50b691d5799e16fb01fc25e44a1fb3959428c7f11a33eebbfed354d3c8
-
SSDEEP
1536:fVNy7Kwv/VhKnyVIYcd/NdlkpW7YQ/32rKAP9XO/uYe7eal/AD/0NO5e+vg8:K7NyDYe/uYeP/g5I8
Score
7/10
Malware Config
Signatures
-
Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself /usr/sbin/dropbear 710 934e2d08aa3750f141db716c7f70b26b -
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
description ioc Process File opened for reading /proc/net/route 934e2d08aa3750f141db716c7f70b26b -
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
description ioc Process File opened for reading /proc/net/route 934e2d08aa3750f141db716c7f70b26b