Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
125s -
max time network
154s -
platform
debian-9_mipsel -
resource
debian9-mipsel-20231215-en -
resource tags
arch:mipselimage:debian9-mipsel-20231215-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem -
submitted
22/12/2023, 13:08
Static task
static1
Behavioral task
behavioral1
Sample
98fc1823a36e96a58abe455c809f776f
Resource
debian9-mipsel-20231215-en
General
-
Target
98fc1823a36e96a58abe455c809f776f
-
Size
99KB
-
MD5
98fc1823a36e96a58abe455c809f776f
-
SHA1
58a9522c29a4905245f9fd76db579f0a63700776
-
SHA256
2307ede46795205f3e4f64a7630b0789662c231bd694270cc9b3dfc91899ce02
-
SHA512
131c5cd1e2fedd75fdd69a7a82601a41dca67085521fb46462c9ec0077ad1e5f9c8e4504c69da314086e02bad85345507e00a8e04f1294a21395beb0b69c6df9
-
SSDEEP
1536:pZR14AmrYb8dpUEjO4zFBL+3S3UZu0Er2aQLFBk5v3A:n4AmruOUE83S3UwyE3A
Malware Config
Signatures
-
Contacts a large (93381) amount of remote hosts 1 TTPs
This may indicate a network scan to discover remotely running services.
-
Creates a large amount of network flows 1 TTPs
This may indicate a network scan to discover remotely running services.
-
Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself 9v9fkungiu0w 711 98fc1823a36e96a58abe455c809f776f -
Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
description ioc Process File opened for modification /tmp/98fc1823a36e96a58abe455c809f776f 98fc1823a36e96a58abe455c809f776f