Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
146s -
max time network
148s -
platform
ubuntu-20.04_amd64 -
resource
ubuntu2004-amd64-20240221-en -
resource tags
arch:amd64arch:i386image:ubuntu2004-amd64-20240221-enkernel:5.4.0-169-genericlocale:en-usos:ubuntu-20.04-amd64system -
submitted
23/02/2024, 05:47
Static task
static1
Behavioral task
behavioral1
Sample
fb22a89b757f26048ef0e1704b17dfcb4540dec9b0d57c8c234b331920bc809f.elf
Resource
ubuntu2004-amd64-20240221-en
General
-
Target
fb22a89b757f26048ef0e1704b17dfcb4540dec9b0d57c8c234b331920bc809f.elf
-
Size
6.6MB
-
MD5
f51c0310538976604832ec91f74e5f52
-
SHA1
2d24708ba075d84e5fa02a4fcb0868e533b945e1
-
SHA256
fb22a89b757f26048ef0e1704b17dfcb4540dec9b0d57c8c234b331920bc809f
-
SHA512
451ac682f8a2ad067e02e6620a89ea00601e36673ebb2d5c2cc7aed317ec90374f477655d792365d3afc7860badeab80166c64c6f17d42d292309b16d40f6adc
-
SSDEEP
49152:RiOzrb/TtvO90dL3BmAFd4A64nsfJ28uLCEXZbdeyJUQahL2JA/5Q98Qe+CMb5E4:N8MWRKYaEsXJI7k7nxa3nW8+mDTKIz6
Malware Config
Signatures
-
Enumerates kernel/hardware configuration 1 TTPs 2 IoCs
Reads contents of /sys virtual filesystem to enumerate system information.
description ioc Process File opened for reading /sys/kernel/mm/transparent_hugepage/hpage_pmd_size fb22a89b757f26048ef0e1704b17dfcb4540dec9b0d57c8c234b331920bc809f.elf File opened for reading /sys/kernel/mm/transparent_hugepage/hpage_pmd_size fb22a89b757f26048ef0e1704b17dfcb4540dec9b0d57c8c234b331920bc809f.elf
Processes
-
/tmp/fb22a89b757f26048ef0e1704b17dfcb4540dec9b0d57c8c234b331920bc809f.elf/tmp/fb22a89b757f26048ef0e1704b17dfcb4540dec9b0d57c8c234b331920bc809f.elf1⤵
- Enumerates kernel/hardware configuration
PID:1462 -
/tmp/fb22a89b757f26048ef0e1704b17dfcb4540dec9b0d57c8c234b331920bc809f.elf/tmp/fb22a89b757f26048ef0e1704b17dfcb4540dec9b0d57c8c234b331920bc809f.elf -background2⤵
- Enumerates kernel/hardware configuration
PID:1473
-