Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
152s -
max time network
156s -
platform
debian-9_armhf -
resource
debian9-armhf-20231215-en -
resource tags
arch:armhfimage:debian9-armhf-20231215-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem -
submitted
22/12/2023, 13:23
Static task
static1
Behavioral task
behavioral1
Sample
a15aabcb9afb989848da47f9b0565791
Resource
debian9-armhf-20231215-en
3 signatures
150 seconds
General
-
Target
a15aabcb9afb989848da47f9b0565791
-
Size
196KB
-
MD5
a15aabcb9afb989848da47f9b0565791
-
SHA1
78596d860e52fef9877761a2834a7c23f8aeb5fa
-
SHA256
ffcb62d46be34f96e0d4df2bcdb8aa3beb1bba4ae344d63c51b017e633dbdb13
-
SHA512
f1c141e211fabc9b7c1befa26774bf60c521ecaea6462ca634847bf65c9bc23f3bdf4911ac31d940c0439feb785e3cde37cb32fa07a1c2782a5eb2885cc307e8
-
SSDEEP
6144:tyj24pR53tA+eBKfflUxmumL3FFZCQpAxbOaajs:t0245De2tUxmumL3FFEQpAxbOaajs
Score
7/10
Malware Config
Signatures
-
Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself [cpuset] 654 a15aabcb9afb989848da47f9b0565791 -
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
description ioc Process File opened for reading /proc/net/route a15aabcb9afb989848da47f9b0565791 -
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
description ioc Process File opened for reading /proc/net/route a15aabcb9afb989848da47f9b0565791