Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
143s -
max time network
152s -
platform
ubuntu-18.04_amd64 -
resource
ubuntu1804-amd64-20231221-en -
resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20231221-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system -
submitted
14/01/2024, 07:32
Static task
static1
Behavioral task
behavioral1
Sample
5aa68537c9d6404db0ef8edb85ac44f0
Resource
ubuntu1804-amd64-20231221-en
2 signatures
150 seconds
General
-
Target
5aa68537c9d6404db0ef8edb85ac44f0
-
Size
78KB
-
MD5
5aa68537c9d6404db0ef8edb85ac44f0
-
SHA1
4d3332122869ffb48506d70470f6b6d0274a8fff
-
SHA256
db6207e5859614ee43cd64bd528b0c3ef61be4a8224b0eca48eedb2304c530d4
-
SHA512
998876ad999aee9ef6a5c9b8bd76b78251ba78921f140211f9a89c438d916ae5243aef2bb36fab0ac8cb39f44ac04cffb2d8f3900178c1c3198e85401a650c0f
-
SSDEEP
1536:47IZuSaH+1iDnD+Q8bQ8O32Ls0FnswNRzvmA+JbOm/coZ3ymj:eCae1ItqQH2LDnsERzvm/JbOmEoZimj
Score
6/10
Malware Config
Signatures
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
description ioc Process File opened for reading /proc/net/route 5aa68537c9d6404db0ef8edb85ac44f0 -
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
description ioc Process File opened for reading /proc/net/route 5aa68537c9d6404db0ef8edb85ac44f0