Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    2s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20231222-en
  • resource tags

    arch:armhfimage:debian9-armhf-20231222-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    22/12/2023, 13:14

General

  • Target

    .x/inst

  • Size

    37KB

  • MD5

    64fb1ea672099ad89d052ca874e52d56

  • SHA1

    160cd00449b7e59e5aaccf4d068caa47f222efd0

  • SHA256

    1efae255629a8a7509e9730293f02d86a579f8a9fdbef433654dd13af732313c

  • SHA512

    b30021056535fc23f1c631bc2772f8b9a13db7f0ab0e6fc1a44883d1bb651250321508eb3b62e48bab93a4de599f25ccbd154dbbb634ade3d6685aee74861480

  • SSDEEP

    768:1vVKewgpMMx/XNNwsOlET+UpdzmO+lIZrGWfg16KADaQ9hPY+WH7:dTjx/rZFDoldWw6/DaQ/w+WH7

Score
3/10

Malware Config

Signatures

  • Writes file to tmp directory 3 IoCs

    Malware often drops required files in the /tmp directory.

Processes

  • /tmp/.x/inst
    /tmp/.x/inst
    1⤵
    • Writes file to tmp directory
    PID:657

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /tmp/.x/.user

    Filesize

    16B

    MD5

    a7a2da752ae2b5b2032a1193d59eb4d5

    SHA1

    36eae03503d27e527941c14ae4b30de8a4102cbd

    SHA256

    b8fca769951dfa808e7bb60726a726e119b219dbf85344b7a53b7910cb61689e

    SHA512

    e4d3a05b7bd97f1c56dbf3c107607fadc420386ebd4fceccb31dbe2bf72800999e009a12e8bd81bab5fb9c036a29b6c2ab37ba35fb7c975af371753df4a893f5

  • /tmp/.x/.user

    Filesize

    54B

    MD5

    8cc3aa714b2a5f40af5c5783555eaadc

    SHA1

    6bc56e09cd0cd9776dfc3061061066b0ce5eaa72

    SHA256

    41cdd5198c896c8dcb73383b51186f36cf44470a776e38f16cac444d857b566a

    SHA512

    c61f20b6db8984d6fa88f41c2bd470e384448436ee395fb887726f1bd1ed9befb8239fcf891a355f2ce011065d40e4c0f286773b40885e7961ca32bedea38190

  • /tmp/.x/.user

    Filesize

    62B

    MD5

    90a12af865d91d44abfb70ec350df2b1

    SHA1

    c92aed5f8b4b6facd729d481e6feac406328220b

    SHA256

    1a0e0f24051fdf882d35ad2ca6accc337d56a4d640862da62dca1065b00de5c3

    SHA512

    9090f53fc27cbfdb88c5b97dc1cd91e96323abdde031a49996d7f628c564cc3e385a5d4e63182e18e1b538f6332def137742860b4dd65ef088adb220f987d5c2

  • /tmp/.x/.user

    Filesize

    69B

    MD5

    d743445ab68b8cfdfb47b3b9678e50df

    SHA1

    6416fb0f60b59773a2afaa82f6d8a3ec79688b3d

    SHA256

    5d3956662b559941e10c612a1e76887f16da5316d5d341e3c19a0e6c7c8b6ed8

    SHA512

    444574769de59a6c675378073ae04de7750e33489711f97ea6685b34519d694ed4fccb3287e05316b2a9a8199a2fa1bffd425ee9749b41b10b81d49e0f8d96e7

  • /tmp/.x/.user

    Filesize

    82B

    MD5

    ecdd813f54c549a0f464c6a34f15c62b

    SHA1

    5947bc85c84d04236b7b7f5cdd645136617fda49

    SHA256

    7a9ac3954ba7f59bcab9799eca1659f6a8534cdd23e91ee4f16cbaba5aa4cc4f

    SHA512

    006368cbc58b5b4893cf45c58e65629530adcac165c3d074d97312e96194a596a54713484216711a0499f04642ae4d3fe0e77d79bf35604dc4acbb470c85b225

  • /tmp/.x/.user

    Filesize

    102B

    MD5

    5236179be786c80521de99d02c35deee

    SHA1

    10a5ed968a18a374319f3b8c239ddb152675609d

    SHA256

    145763fcf8936cc06f9b3297f4118c49e2dbae4ee0bd69fbaa0c89cf126103b1

    SHA512

    837c756050487b931eb7fd54f93af6fedc3653525e22a767c39de3963e17878b60a200cb6a089fa228d6988167d0d13fba8e7620a0a0aea311132497f5fb4349

  • /tmp/.x/.user2

    Filesize

    75B

    MD5

    8c82102add87a3ff9711f099877a6a58

    SHA1

    1c7062cd1993f130f9aea6cd43de9e8fe22cf97f

    SHA256

    edcacf29dad1015048682aa421ef3780e8256cee5f64c0c69b4dd5ab1a6a6e60

    SHA512

    7332ba812baa8fe660218b540a41662d39c13db94bdcf335500b79c1326880e83bb5e46b4774fae0bdb1ae8164b85e76b91493790cf0834960ea2e08ab5005ba

  • /tmp/.x/.user2

    Filesize

    88B

    MD5

    fdf8d262a96799799e6e5d0c31b55734

    SHA1

    4d57e342e8426874150c7d84b29a15255533ba45

    SHA256

    ca0fdbd7c43c2c7c33a4efe39efc1296ace2b19fefc41ceb7279c2cbefa8b0c7

    SHA512

    a1b607f3c233401bdfe03d44aaec436fe179cf391088c6444b9e267e67d2ae115332dc7838e82e9d474d1a9539fa033b41404b89a5a37dca0024df29e3d24b8c