Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

6

Static

static

1

.kdi/autorun

ubuntu-18.04-amd64

6

.kdi/autorun

debian-9-armhf

6

.kdi/autorun

debian-9-mips

6

.kdi/autorun

debian-9-mipsel

6

.kdi/bash

ubuntu-18.04-amd64

.kdi/inst

ubuntu-18.04-amd64

3

.kdi/inst

debian-9-armhf

1

.kdi/inst

debian-9-mips

1

.kdi/inst

debian-9-mipsel

3

.kdi/m.vbs

windows7-x64

1

.kdi/m.vbs

windows10-2004-x64

1

.kdi/pico

ubuntu-18.04-amd64

.kdi/run

ubuntu-18.04-amd64

1

.kdi/run

debian-9-armhf

1

.kdi/run

debian-9-mips

1

.kdi/run

debian-9-mipsel

1

.kdi/start

ubuntu-18.04-amd64

1

.kdi/start

debian-9-armhf

1

.kdi/start

debian-9-mips

1

.kdi/start

debian-9-mipsel

1

.kdi/xh

ubuntu-18.04-amd64

Analysis

  • max time kernel
    6s
  • max time network
    8s
  • platform
    ubuntu-18.04_amd64
  • resource
    ubuntu1804-amd64-20231215-en
  • resource tags

    arch:amd64arch:i386image:ubuntu1804-amd64-20231215-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
  • submitted
    22/12/2023, 07:20 UTC

Sharing

Copy URL
Twitter E-mail

Errors

Reason
platform exec: stat /lib/ld-linux.so.2: no such file or directory payload error: fork/exec /tmp/.kdi/pico: no such file or directory
Report Analysis Logs

General

  • Target

    .kdi/pico

  • Size

    164KB

  • MD5

    51c7f3ec60f1613aa5202f26d9248ed1

  • SHA1

    835ab0aba3740fcf80fe7238ef4d089d8c5a72c1

  • SHA256

    5e092470ec616d5b866aab0f1a69309b74a48567eec7a250c9a328901a21a498

  • SHA512

    424071e10216836567266cda5ab18876943817e731272ca68f1b96d00e80cef90c286aa5c46fdd5d963014282f39964f46905bda2e18309d6692383e24b5b8b6

  • SSDEEP

    3072:6vq0piaD1aJ3INN6QhldW6dV/T76+eRWPdrJlkODLm729xJtyv0t:6vtjDsYNJdW6dV/T76aPdrJlkOHm729b

Score
1/10

Malware Config

Signatures

Processes

  • /tmp/.kdi/pico
    /tmp/.kdi/pico
    1⤵
      PID:1555

    Network

    • flag-us
      DNS
      cdn.fwupd.org
      Remote address:
      1.1.1.1:53
      Request
      cdn.fwupd.org
      IN A
      Response
      cdn.fwupd.org
      IN CNAME
      dualstack.p2.shared.global.fastly.net
      dualstack.p2.shared.global.fastly.net
      IN A
      151.101.2.49
      dualstack.p2.shared.global.fastly.net
      IN A
      151.101.194.49
      dualstack.p2.shared.global.fastly.net
      IN A
      151.101.66.49
      dualstack.p2.shared.global.fastly.net
      IN A
      151.101.130.49
    • flag-us
      DNS
      cdn.fwupd.org
      Remote address:
      1.1.1.1:53
      Request
      cdn.fwupd.org
      IN AAAA
      Response
      cdn.fwupd.org
      IN CNAME
      dualstack.p2.shared.global.fastly.net
      dualstack.p2.shared.global.fastly.net
      IN AAAA
      2a04:4e42::561
      dualstack.p2.shared.global.fastly.net
      IN AAAA
      2a04:4e42:200::561
      dualstack.p2.shared.global.fastly.net
      IN AAAA
      2a04:4e42:400::561
      dualstack.p2.shared.global.fastly.net
      IN AAAA
      2a04:4e42:600::561
    • 151.101.194.49:443
      tls
      127 B
       40 B
       2
      1
    • 151.101.65.91:443
      tls
      127 B
       40 B
       2
      1
    • 151.101.130.49:443
      cdn.fwupd.org
      tls
      8.0kB
       945.9kB
       138
      687
    • 89.187.167.2:443
      tls
      135 B
       2
    • 224.0.0.251:5353
      73 B
       1
    • 1.1.1.1:53
      cdn.fwupd.org
      dns
      70 B
       185 B
       1
      1

      DNS Request

      cdn.fwupd.org

      DNS Response

      151.101.2.49
      151.101.194.49
      151.101.66.49
      151.101.130.49

    • 1.1.1.1:53
      cdn.fwupd.org
      dns
      70 B
       233 B
       1
      1

      DNS Request

      cdn.fwupd.org

      DNS Response

      2a04:4e42::561
      2a04:4e42:200::561
      2a04:4e42:400::561
      2a04:4e42:600::561

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    We care about your privacy.

    This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.