Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
3s -
max time network
4s -
platform
ubuntu-18.04_amd64 -
resource
ubuntu1804-amd64-20231221-en -
resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20231221-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system -
submitted
12/02/2024, 03:59 UTC
Static task
static1
Behavioral task
behavioral1
Sample
70f2e6e24a55676bb3539e82173fa378393e20fcda607da29cecdebde6e813b5.elf
Resource
ubuntu1804-amd64-20231221-en
Behavioral task
behavioral2
Sample
70f2e6e24a55676bb3539e82173fa378393e20fcda607da29cecdebde6e813b5.elf
Resource
debian9-armhf-20231215-en
Behavioral task
behavioral3
Sample
70f2e6e24a55676bb3539e82173fa378393e20fcda607da29cecdebde6e813b5.elf
Resource
debian9-mipsbe-20231215-en
Behavioral task
behavioral4
Sample
70f2e6e24a55676bb3539e82173fa378393e20fcda607da29cecdebde6e813b5.elf
Resource
debian9-mipsel-20231222-en
Errors
General
-
Target
70f2e6e24a55676bb3539e82173fa378393e20fcda607da29cecdebde6e813b5.elf
-
Size
78KB
-
MD5
b51d80b9fc70a14b209d6eab6da80118
-
SHA1
6226581299f2f1891612bd41e86115b3ebeee5da
-
SHA256
70f2e6e24a55676bb3539e82173fa378393e20fcda607da29cecdebde6e813b5
-
SHA512
c9367423d238b2ba1b09785d2042e8a299bb50dc94cddc93366ac8762a81cebea719c73ac72c513f275a9c9c56b69c16a92e5bd76e0631e00f61e860b5bfb622
-
SSDEEP
1536:dU3o04p82oq1QbJNDFN4yeX87vyKcrWG6mqygsCcqg+rkYHyTG:dU3iTZgJxEyeayKcrD6ggBcndTG
Malware Config
Signatures
Processes
Network
-
Remote address:1.1.1.1:53Requestcdn.fwupd.orgIN AResponsecdn.fwupd.orgIN CNAMEdualstack.p2.shared.global.fastly.netdualstack.p2.shared.global.fastly.netIN A151.101.194.49dualstack.p2.shared.global.fastly.netIN A151.101.66.49dualstack.p2.shared.global.fastly.netIN A151.101.130.49dualstack.p2.shared.global.fastly.netIN A151.101.2.49
-
Remote address:1.1.1.1:53Requestcdn.fwupd.orgIN AAAAResponsecdn.fwupd.orgIN CNAMEdualstack.p2.shared.global.fastly.netdualstack.p2.shared.global.fastly.netIN AAAA2a04:4e42::561dualstack.p2.shared.global.fastly.netIN AAAA2a04:4e42:200::561dualstack.p2.shared.global.fastly.netIN AAAA2a04:4e42:400::561dualstack.p2.shared.global.fastly.netIN AAAA2a04:4e42:600::561
-
Remote address:1.1.1.1:53Request1527653184.rsc.cdn77.orgIN AResponse1527653184.rsc.cdn77.orgIN A195.181.164.151527653184.rsc.cdn77.orgIN A89.187.167.9
-
Remote address:1.1.1.1:53Request1527653184.rsc.cdn77.orgIN AAAAResponse1527653184.rsc.cdn77.orgIN AAAA2a02:6ea0:ca00::31527653184.rsc.cdn77.orgIN AAAA2a02:6ea0:ca00::4
-
127 B 40 B 2 1
-
10.8kB 1.1MB 192 781
-
127 B 40 B 2 1
-
353 B 5
-
135 B 2
-
135 B 2
-
4.3kB 223.1kB 71 169
-
8.1kB 720.4kB 146 524
-
73 B 1
-
70 B 185 B 1 1
DNS Request
cdn.fwupd.org
DNS Response
151.101.194.49151.101.66.49151.101.130.49151.101.2.49
-
70 B 233 B 1 1
DNS Request
cdn.fwupd.org
DNS Response
2a04:4e42::5612a04:4e42:200::5612a04:4e42:400::5612a04:4e42:600::561
-
81 B 113 B 1 1
DNS Request
1527653184.rsc.cdn77.org
DNS Response
195.181.164.1589.187.167.9
-
81 B 137 B 1 1
DNS Request
1527653184.rsc.cdn77.org
DNS Response
2a02:6ea0:ca00::32a02:6ea0:ca00::4