Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    134s
  • max time network
    139s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20231222-en
  • resource tags

    arch:armhfimage:debian9-armhf-20231222-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    25/12/2023, 03:57

General

  • Target

    d58e42f98f69b8b1f74b7c639a1cce00.elf

  • Size

    134KB

  • MD5

    d58e42f98f69b8b1f74b7c639a1cce00

  • SHA1

    7ede3706e3ba8a713e1bad1c19c9a8080ea63c33

  • SHA256

    056fedcd36dfcfe849e56bf64e4af575e5959b63d5f707a49acbab5202904bbf

  • SHA512

    55e3b272afb07a8df461bb1535aaea0ba0bad40604f3f917e9d09e88c1673ba3771391ff3805a08c27a72bc740d33a267c2c11f23af9c5d3b2c5bd65db19917a

  • SSDEEP

    1536:reIIcq87ZO8VQzlHaurUA4XlFFAeSz4VAZJsTgVUs/Br22/I/dLl2zUwywmFfbBq:aIIifMrUzVFFM4UiMVUs/Hg/GxyvQV

Score
7/10

Malware Config

Signatures

  • Changes its process name 1 IoCs
  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Reads runtime system information 64 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • /tmp/d58e42f98f69b8b1f74b7c639a1cce00.elf
    /tmp/d58e42f98f69b8b1f74b7c639a1cce00.elf
    1⤵
    • Changes its process name
    PID:658

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads