Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

u960_recov...pi.dll

windows7-x64

3

u960_recov...pi.dll

windows10-2004-x64

3

u960_recov...pi.dll

windows7-x64

1

u960_recov...pi.dll

windows10-2004-x64

3

u960_recov...db.exe

windows7-x64

1

u960_recov...db.exe

windows10-2004-x64

1

u960_recov...ot.exe

windows7-x64

1

u960_recov...ot.exe

windows10-2004-x64

1

cache/tmp_...ibc.so

debian-9-armhf

1

cache/tmp_...ils.so

debian-9-armhf

1

cache/tmp_...log.so

debian-9-armhf

1

cache/tmp_...ibm.so

debian-9-armhf

1

cache/tmp_...c++.so

debian-9-armhf

1

recovery/recovery

debian-9-armhf

3

u960_recov...rgRush

debian-9-armhf

u960_recov...ry.bat

windows7-x64

1

u960_recov...ry.bat

windows10-2004-x64

1

u960_recov...ot.bat

windows7-x64

1

u960_recov...ot.bat

windows10-2004-x64

1

u960_recov...ry.bat

windows7-x64

1

u960_recov...ry.bat

windows10-2004-x64

1

Analysis

  • max time kernel
    5s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20231215-en
  • resource tags

    arch:armhfimage:debian9-armhf-20231215-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    22/12/2023, 12:55

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    recovery/recovery

  • Size

    420KB

  • MD5

    e1a260a49036acc20e8adaf81e907b8c

  • SHA1

    04c017f5a79a6519bb0c9fe8bff7b2fb9ae85c61

  • SHA256

    6df9c8a5d2e2e0aefdbd4134618c683dd15f3336dced3bfdfcad28df0a5d8c72

  • SHA512

    698809ce5a0fed1eb1d8e53b502cf1999d705e47f11109608fd053c753d19173c29b6463abaf70f0086c3c072aab243c315e47a1347af02031a115ec4c42488b

  • SSDEEP

    6144:lwL/Pf49pPR0dS7BHgbI2Mlm4/4pizmMzxZx8U1uIgA8BRauZIPCl7wuoba6NGpp:lhRdT3lQpM1IQCl0uobaNpljTgpo

Score
3/10

Malware Config

Signatures

  • Writes file to tmp directory 1 IoCs

    Malware often drops required files in the /tmp directory.

Processes

  • /tmp/recovery/recovery
    /tmp/recovery/recovery
    1⤵
    • Writes file to tmp directory
    PID:669

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads