Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
132s -
max time network
151s -
platform
debian-9_mips -
resource
debian9-mipsbe-20240221-en -
resource tags
arch:mipsimage:debian9-mipsbe-20240221-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem -
submitted
24/02/2024, 08:36
Static task
static1
Behavioral task
behavioral1
Sample
34fef7573e20414e547ce51dea187fe8641f37bc49b650b14dc6d4c882231efe.elf
Resource
debian9-mipsbe-20240221-en
1 signatures
150 seconds
General
-
Target
34fef7573e20414e547ce51dea187fe8641f37bc49b650b14dc6d4c882231efe.elf
-
Size
6.9MB
-
MD5
7c637b2dc8bfb1b47256869530bf4f36
-
SHA1
0cfd09a2d8031acca13404cd5f076dcc9d412e7e
-
SHA256
34fef7573e20414e547ce51dea187fe8641f37bc49b650b14dc6d4c882231efe
-
SHA512
2f14a0d2cca3885bcc117363139f314bd34e2c412c9e91abf61d58f8cab3c2035612c5a4f84a5ab424340d70a1affd27f327623db886ec998bc6188a20df9254
-
SSDEEP
98304:CjydqP/NDaZubonlK6cSKLYFsKOMHmWLR04m8:C5nNOMn9LYFsNMXRp
Score
3/10
Malware Config
Signatures
-
Enumerates kernel/hardware configuration 1 TTPs 2 IoCs
Reads contents of /sys virtual filesystem to enumerate system information.
description ioc Process File opened for reading /sys/kernel/mm/transparent_hugepage/hpage_pmd_size 34fef7573e20414e547ce51dea187fe8641f37bc49b650b14dc6d4c882231efe.elf File opened for reading /sys/kernel/mm/transparent_hugepage/hpage_pmd_size 34fef7573e20414e547ce51dea187fe8641f37bc49b650b14dc6d4c882231efe.elf
Processes
-
/tmp/34fef7573e20414e547ce51dea187fe8641f37bc49b650b14dc6d4c882231efe.elf/tmp/34fef7573e20414e547ce51dea187fe8641f37bc49b650b14dc6d4c882231efe.elf1⤵
- Enumerates kernel/hardware configuration
PID:702 -
/tmp/34fef7573e20414e547ce51dea187fe8641f37bc49b650b14dc6d4c882231efe.elf/tmp/34fef7573e20414e547ce51dea187fe8641f37bc49b650b14dc6d4c882231efe.elf -background2⤵
- Enumerates kernel/hardware configuration
PID:712
-