Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    125s
  • max time network
    154s
  • platform
    debian-9_mipsel
  • resource
    debian9-mipsel-20231215-en
  • resource tags

    arch:mipselimage:debian9-mipsel-20231215-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem
  • submitted
    22/12/2023, 13:08

General

  • Target

    98fc1823a36e96a58abe455c809f776f

  • Size

    99KB

  • MD5

    98fc1823a36e96a58abe455c809f776f

  • SHA1

    58a9522c29a4905245f9fd76db579f0a63700776

  • SHA256

    2307ede46795205f3e4f64a7630b0789662c231bd694270cc9b3dfc91899ce02

  • SHA512

    131c5cd1e2fedd75fdd69a7a82601a41dca67085521fb46462c9ec0077ad1e5f9c8e4504c69da314086e02bad85345507e00a8e04f1294a21395beb0b69c6df9

  • SSDEEP

    1536:pZR14AmrYb8dpUEjO4zFBL+3S3UZu0Er2aQLFBk5v3A:n4AmruOUE83S3UwyE3A

Score
9/10

Malware Config

Signatures

  • Contacts a large (93381) amount of remote hosts 1 TTPs

    This may indicate a network scan to discover remotely running services.

  • Creates a large amount of network flows 1 TTPs

    This may indicate a network scan to discover remotely running services.

  • Changes its process name 1 IoCs
  • Writes file to tmp directory 1 IoCs

    Malware often drops required files in the /tmp directory.

Processes

  • /tmp/98fc1823a36e96a58abe455c809f776f
    /tmp/98fc1823a36e96a58abe455c809f776f
    1⤵
    • Changes its process name
    • Writes file to tmp directory
    PID:711

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads