Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

6

Static

static

1

.bash/autorun

ubuntu-18.04-amd64

6

.bash/autorun

debian-9-armhf

6

.bash/autorun

debian-9-mips

6

.bash/autorun

debian-9-mipsel

1

.bash/makesalt

ubuntu-18.04-amd64

.bash/ntpd

ubuntu-18.04-amd64

3

.bash/psybncchk

ubuntu-18.04-amd64

1

.bash/psybncchk

debian-9-armhf

1

.bash/psybncchk

debian-9-mips

1

.bash/psybncchk

debian-9-mipsel

1

.bash/run

ubuntu-18.04-amd64

1

.bash/run

debian-9-armhf

1

.bash/run

debian-9-mips

1

.bash/run

debian-9-mipsel

1

.bash/src/match.o

ubuntu-18.04-amd64

.bash/src/...fish.o

ubuntu-18.04-amd64

.bash/src/p_client.o

ubuntu-18.04-amd64

.bash/src/p_crypt.o

ubuntu-18.04-amd64

.bash/src/p_dcc.o

ubuntu-18.04-amd64

.bash/src/p_hash.o

ubuntu-18.04-amd64

.bash/src/p_idea.o

ubuntu-18.04-amd64

.bash/src/p_inifunc.o

ubuntu-18.04-amd64

.bash/src/p_intnet.o

ubuntu-18.04-amd64

.bash/src/p_link.o

ubuntu-18.04-amd64

.bash/src/p_log.o

ubuntu-18.04-amd64

.bash/src/p_memory.o

ubuntu-18.04-amd64

.bash/src/p_network.o

ubuntu-18.04-amd64

.bash/src/p_parse.o

ubuntu-18.04-amd64

.bash/src/p_peer.o

ubuntu-18.04-amd64

.bash/src/p_script.o

ubuntu-18.04-amd64

.bash/src/p_server.o

ubuntu-18.04-amd64

.bash/src/p_socket.o

ubuntu-18.04-amd64

Analysis

  • max time kernel
    4s
  • max time network
    7s
  • platform
    ubuntu-18.04_amd64
  • resource
    ubuntu1804-amd64-20231215-en
  • resource tags

    arch:amd64arch:i386image:ubuntu1804-amd64-20231215-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
  • submitted
    22/12/2023, 12:48 UTC

Sharing

Copy URL
Twitter E-mail

Errors

Reason
Payload did not run: payload error: fork/exec /tmp/.bash/src/p_hash.o: exec format error
Report Analysis Logs

General

  • Target

    .bash/src/p_hash.o

  • Size

    14KB

  • MD5

    0b38d3f42d3919fc4ee336d23e906bb6

  • SHA1

    12e6dc6127e98e369c47222b7f32c2fb99968faf

  • SHA256

    b5407fbd27842369ec9651d452976f85dcf10d9ef5c3209b35e9ec082ff6bb75

  • SHA512

    f507eaae068c1beae8c286f6176b58d235ee7d64fed81b42f2d7a9bdbd22305b632eef2a80a0369c3b3af0aaf5762f70275773244682ae474126f4573734c903

  • SSDEEP

    384:FqXjYt+X4WOSjUwzH84ni+37zDP/s60A3UfHlSazQtrwGAaTLjq:8XjYqLi+r/ndxkfFitrTAau

Score
1/10

Malware Config

Signatures

Processes

  • /tmp/.bash/src/p_hash.o
    /tmp/.bash/src/p_hash.o
    1⤵
      PID:1521

    Network

    • flag-us
      DNS
      cdn.fwupd.org
      Remote address:
      1.1.1.1:53
      Request
      cdn.fwupd.org
      IN A
      Response
      cdn.fwupd.org
      IN CNAME
      dualstack.p2.shared.global.fastly.net
      dualstack.p2.shared.global.fastly.net
      IN A
      151.101.2.49
      dualstack.p2.shared.global.fastly.net
      IN A
      151.101.66.49
      dualstack.p2.shared.global.fastly.net
      IN A
      151.101.130.49
      dualstack.p2.shared.global.fastly.net
      IN A
      151.101.194.49
    • flag-us
      DNS
      cdn.fwupd.org
      Remote address:
      1.1.1.1:53
      Request
      cdn.fwupd.org
      IN AAAA
      Response
      cdn.fwupd.org
      IN CNAME
      dualstack.p2.shared.global.fastly.net
      dualstack.p2.shared.global.fastly.net
      IN AAAA
      2a04:4e42::561
      dualstack.p2.shared.global.fastly.net
      IN AAAA
      2a04:4e42:600::561
      dualstack.p2.shared.global.fastly.net
      IN AAAA
      2a04:4e42:200::561
      dualstack.p2.shared.global.fastly.net
      IN AAAA
      2a04:4e42:400::561
    • 151.101.194.49:443
      tls
      404 B
       6
    • 151.101.194.49:443
      cdn.fwupd.org
      tls
      15.9kB
       685.0kB
       272
      500
    • 151.101.65.91:443
      tls
      127 B
       40 B
       2
      1
    • 89.187.167.5:443
      tls
      353 B
       5
    • 224.0.0.251:5353
      73 B
       1
    • 1.1.1.1:53
      cdn.fwupd.org
      dns
      70 B
       185 B
       1
      1

      DNS Request

      cdn.fwupd.org

      DNS Response

      151.101.2.49
      151.101.66.49
      151.101.130.49
      151.101.194.49

    • 1.1.1.1:53
      cdn.fwupd.org
      dns
      70 B
       233 B
       1
      1

      DNS Request

      cdn.fwupd.org

      DNS Response

      2a04:4e42::561
      2a04:4e42:600::561
      2a04:4e42:200::561
      2a04:4e42:400::561

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    We care about your privacy.

    This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.