Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
9c6d413d849d35b2edbe557e1d408c15
-
Size
131KB
-
Sample
231220-ldr52sfbel
-
MD5
9c6d413d849d35b2edbe557e1d408c15
-
SHA1
d6507375b7ca1e0d3885b95a7670d4310dafac71
-
SHA256
f420edf09d37f1f3857bcb8c736cec398729559ec963f003a8a83c10c4481201
-
SHA512
76dbe9ad463bacb03d4ccf22faab75bd86e20f227743d474e745429ddcf25e30021e879aed571eda9acd75264d8d5d282d8668ded23217b917b0f68cdc70328a
-
SSDEEP
3072:OVWLLftrN7AT5ftgMlNu4BCUTgQ0YELouADffiEQMM/9YogT1:OVwLftrN7AT5ftgMi2CUTgQpqolffizw
Static task
static1
Behavioral task
behavioral1
Sample
9c6d413d849d35b2edbe557e1d408c15
Resource
debian9-armhf-20231215-en
Malware Config
Targets
-
-
Target
9c6d413d849d35b2edbe557e1d408c15
-
Size
131KB
-
MD5
9c6d413d849d35b2edbe557e1d408c15
-
SHA1
d6507375b7ca1e0d3885b95a7670d4310dafac71
-
SHA256
f420edf09d37f1f3857bcb8c736cec398729559ec963f003a8a83c10c4481201
-
SHA512
76dbe9ad463bacb03d4ccf22faab75bd86e20f227743d474e745429ddcf25e30021e879aed571eda9acd75264d8d5d282d8668ded23217b917b0f68cdc70328a
-
SSDEEP
3072:OVWLLftrN7AT5ftgMlNu4BCUTgQ0YELouADffiEQMM/9YogT1:OVwLftrN7AT5ftgMi2CUTgQpqolffizw
Score9/10-
Contacts a large (22555) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Changes its process name
-
Deletes itself
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Enumerates active TCP sockets
Gets active TCP sockets from /proc virtual filesystem.
-