Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
145s -
max time network
134s -
platform
ubuntu-18.04_amd64 -
resource
ubuntu1804-amd64-20240226-en -
resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20240226-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system -
submitted
08/03/2024, 13:58
Static task
static1
Behavioral task
behavioral1
Sample
htop
Resource
ubuntu1804-amd64-20240226-en
3 signatures
150 seconds
General
-
Target
htop
-
Size
44.2MB
-
MD5
7343b70cbeb68213e24a9eccd51aa78b
-
SHA1
64f78d6895ced4c6b1c24ffd0e1ba50048b89132
-
SHA256
ce07d922a8fd26f647a3d1cf653c6a579cbc77c18f4f8801bceda9c7ee750525
-
SHA512
f5f077dba44ffa3efe38132777a79b8185640e6f38c0e6893bc7bc6f3c572366a589cf723d200222ce2ddf2bc4919053f12b77b2d21dec901a249f6a18db1c38
-
SSDEEP
786432:FuyPtsgt1j9ubslD/3+WTjnCD2WllgQdSrY+fuI4M:fGgFubslD/3+WTjnCD2WllgQdEHFj
Score
6/10
Malware Config
Signatures
-
Checks CPU configuration 1 TTPs 1 IoCs
Checks CPU information which indicate if the system is a virtual machine.
description ioc Process File opened for reading /proc/cpuinfo htop -
Enumerates kernel/hardware configuration 1 TTPs 1 IoCs
Reads contents of /sys virtual filesystem to enumerate system information.
description ioc Process File opened for reading /sys/fs/cgroup/memory/memory.limit_in_bytes htop -
Reads runtime system information 3 IoCs
Reads data from /proc virtual filesystem.
description ioc Process File opened for reading /proc/stat htop File opened for reading /proc/meminfo htop File opened for reading /proc/self/maps htop