Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
121s -
max time network
139s -
platform
debian-9_mipsel -
resource
debian9-mipsel-20231215-en -
resource tags
arch:mipselimage:debian9-mipsel-20231215-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem -
submitted
20/12/2023, 08:30
Behavioral task
behavioral1
Sample
959c53f4690cb2e567579ec6885718bf
Resource
debian9-mipsel-20231215-en
4 signatures
150 seconds
General
-
Target
959c53f4690cb2e567579ec6885718bf
-
Size
149KB
-
MD5
959c53f4690cb2e567579ec6885718bf
-
SHA1
8c63cfb0785e78820cead70f776809471a064234
-
SHA256
bfa5bdd1520938d1d2b798564a311347d3ad58276ccc63fc09321cb9f3b5574d
-
SHA512
7e6ec60cb17cf0eb12f7ed04cb9d8b26cf5abadf2e2a2bcc20fd489672a133c66ae7b3edf02b9d319bdd291261cb9c43b7dcfee5ecbd436374f1d5b320311589
-
SSDEEP
1536:jlb6AAR5reTBbUCVl9I4MBZsnlf4APKHQJjeaVtm5hOZrdf3rMsBRTFAHj4jM:Ri14CvAGcjM5hOVt3rMsBRTFCj4jM
Score
7/10
Malware Config
Signatures
-
Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself 2i4w 712 959c53f4690cb2e567579ec6885718bf -
Deletes itself 1 IoCs
pid Process 712 959c53f4690cb2e567579ec6885718bf -
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
description ioc Process File opened for reading /proc/net/route 959c53f4690cb2e567579ec6885718bf -
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
description ioc Process File opened for reading /proc/net/route 959c53f4690cb2e567579ec6885718bf