Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
6Static
static
1.x/autorun
ubuntu-18.04-amd64
6.x/autorun
debian-9-armhf
6.x/autorun
debian-9-mips
1.x/autorun
debian-9-mipsel
6.x/crond
ubuntu-18.04-amd64
.x/inst
ubuntu-18.04-amd64
3.x/inst
debian-9-armhf
3.x/inst
debian-9-mips
3.x/inst
debian-9-mipsel
1.x/m.vbs
windows7-x64
1.x/m.vbs
windows10-2004-x64
1.x/run
ubuntu-18.04-amd64
1.x/run
debian-9-armhf
1.x/run
debian-9-mips
1.x/run
debian-9-mipsel
1.x/start
ubuntu-18.04-amd64
1.x/start
debian-9-armhf
1.x/start
debian-9-mips
1.x/start
debian-9-mipsel
1Analysis
-
max time kernel
1s -
platform
debian-9_mips -
resource
debian9-mipsbe-20231222-en -
resource tags
arch:mipsimage:debian9-mipsbe-20231222-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem -
submitted
22/12/2023, 13:14
Static task
static1
Behavioral task
behavioral1
Sample
.x/autorun
Resource
ubuntu1804-amd64-20231222-en
Behavioral task
behavioral2
Sample
.x/autorun
Resource
debian9-armhf-20231215-en
Behavioral task
behavioral3
Sample
.x/autorun
Resource
debian9-mipsbe-20231215-en
Behavioral task
behavioral4
Sample
.x/autorun
Resource
debian9-mipsel-20231215-en
Behavioral task
behavioral5
Sample
.x/crond
Resource
ubuntu1804-amd64-20231215-en
Behavioral task
behavioral6
Sample
.x/inst
Resource
ubuntu1804-amd64-20231215-en
Behavioral task
behavioral7
Sample
.x/inst
Resource
debian9-armhf-20231222-en
Behavioral task
behavioral8
Sample
.x/inst
Resource
debian9-mipsbe-20231222-en
Behavioral task
behavioral9
Sample
.x/inst
Resource
debian9-mipsel-20231222-en
Behavioral task
behavioral10
Sample
.x/m.vbs
Resource
win7-20231215-en
Behavioral task
behavioral11
Sample
.x/m.vbs
Resource
win10v2004-20231215-en
Behavioral task
behavioral12
Sample
.x/run
Resource
ubuntu1804-amd64-20231215-en
Behavioral task
behavioral13
Sample
.x/run
Resource
debian9-armhf-20231215-en
Behavioral task
behavioral14
Sample
.x/run
Resource
debian9-mipsbe-20231215-en
Behavioral task
behavioral15
Sample
.x/run
Resource
debian9-mipsel-20231215-en
Behavioral task
behavioral16
Sample
.x/start
Resource
ubuntu1804-amd64-20231222-en
Behavioral task
behavioral17
Sample
.x/start
Resource
debian9-armhf-20231215-en
Behavioral task
behavioral18
Sample
.x/start
Resource
debian9-mipsbe-20231222-en
Behavioral task
behavioral19
Sample
.x/start
Resource
debian9-mipsel-20231215-en
General
-
Target
.x/inst
-
Size
37KB
-
MD5
64fb1ea672099ad89d052ca874e52d56
-
SHA1
160cd00449b7e59e5aaccf4d068caa47f222efd0
-
SHA256
1efae255629a8a7509e9730293f02d86a579f8a9fdbef433654dd13af732313c
-
SHA512
b30021056535fc23f1c631bc2772f8b9a13db7f0ab0e6fc1a44883d1bb651250321508eb3b62e48bab93a4de599f25ccbd154dbbb634ade3d6685aee74861480
-
SSDEEP
768:1vVKewgpMMx/XNNwsOlET+UpdzmO+lIZrGWfg16KADaQ9hPY+WH7:dTjx/rZFDoldWw6/DaQ/w+WH7
Malware Config
Signatures
-
Writes file to tmp directory 3 IoCs
Malware often drops required files in the /tmp directory.
description ioc Process File opened for modification /tmp/.x/m.set inst File opened for modification /tmp/.x/.user inst File opened for modification /tmp/.x/.user2 inst
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
16B
MD5a7a2da752ae2b5b2032a1193d59eb4d5
SHA136eae03503d27e527941c14ae4b30de8a4102cbd
SHA256b8fca769951dfa808e7bb60726a726e119b219dbf85344b7a53b7910cb61689e
SHA512e4d3a05b7bd97f1c56dbf3c107607fadc420386ebd4fceccb31dbe2bf72800999e009a12e8bd81bab5fb9c036a29b6c2ab37ba35fb7c975af371753df4a893f5
-
Filesize
54B
MD58cc3aa714b2a5f40af5c5783555eaadc
SHA16bc56e09cd0cd9776dfc3061061066b0ce5eaa72
SHA25641cdd5198c896c8dcb73383b51186f36cf44470a776e38f16cac444d857b566a
SHA512c61f20b6db8984d6fa88f41c2bd470e384448436ee395fb887726f1bd1ed9befb8239fcf891a355f2ce011065d40e4c0f286773b40885e7961ca32bedea38190
-
Filesize
62B
MD590a12af865d91d44abfb70ec350df2b1
SHA1c92aed5f8b4b6facd729d481e6feac406328220b
SHA2561a0e0f24051fdf882d35ad2ca6accc337d56a4d640862da62dca1065b00de5c3
SHA5129090f53fc27cbfdb88c5b97dc1cd91e96323abdde031a49996d7f628c564cc3e385a5d4e63182e18e1b538f6332def137742860b4dd65ef088adb220f987d5c2
-
Filesize
69B
MD5d743445ab68b8cfdfb47b3b9678e50df
SHA16416fb0f60b59773a2afaa82f6d8a3ec79688b3d
SHA2565d3956662b559941e10c612a1e76887f16da5316d5d341e3c19a0e6c7c8b6ed8
SHA512444574769de59a6c675378073ae04de7750e33489711f97ea6685b34519d694ed4fccb3287e05316b2a9a8199a2fa1bffd425ee9749b41b10b81d49e0f8d96e7
-
Filesize
82B
MD5ecdd813f54c549a0f464c6a34f15c62b
SHA15947bc85c84d04236b7b7f5cdd645136617fda49
SHA2567a9ac3954ba7f59bcab9799eca1659f6a8534cdd23e91ee4f16cbaba5aa4cc4f
SHA512006368cbc58b5b4893cf45c58e65629530adcac165c3d074d97312e96194a596a54713484216711a0499f04642ae4d3fe0e77d79bf35604dc4acbb470c85b225
-
Filesize
102B
MD55236179be786c80521de99d02c35deee
SHA110a5ed968a18a374319f3b8c239ddb152675609d
SHA256145763fcf8936cc06f9b3297f4118c49e2dbae4ee0bd69fbaa0c89cf126103b1
SHA512837c756050487b931eb7fd54f93af6fedc3653525e22a767c39de3963e17878b60a200cb6a089fa228d6988167d0d13fba8e7620a0a0aea311132497f5fb4349
-
Filesize
75B
MD58c82102add87a3ff9711f099877a6a58
SHA11c7062cd1993f130f9aea6cd43de9e8fe22cf97f
SHA256edcacf29dad1015048682aa421ef3780e8256cee5f64c0c69b4dd5ab1a6a6e60
SHA5127332ba812baa8fe660218b540a41662d39c13db94bdcf335500b79c1326880e83bb5e46b4774fae0bdb1ae8164b85e76b91493790cf0834960ea2e08ab5005ba
-
Filesize
88B
MD5fdf8d262a96799799e6e5d0c31b55734
SHA14d57e342e8426874150c7d84b29a15255533ba45
SHA256ca0fdbd7c43c2c7c33a4efe39efc1296ace2b19fefc41ceb7279c2cbefa8b0c7
SHA512a1b607f3c233401bdfe03d44aaec436fe179cf391088c6444b9e267e67d2ae115332dc7838e82e9d474d1a9539fa033b41404b89a5a37dca0024df29e3d24b8c