Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
139s -
max time network
142s -
platform
ubuntu-20.04_amd64 -
resource
ubuntu2004-amd64-20240221-en -
resource tags
arch:amd64arch:i386image:ubuntu2004-amd64-20240221-enkernel:5.4.0-169-genericlocale:en-usos:ubuntu-20.04-amd64system -
submitted
15/03/2024, 07:56
Behavioral task
behavioral1
Sample
de711aef83f7baa89004e1fc3aaee4b5.elf
Resource
ubuntu2004-amd64-20240221-en
3 signatures
150 seconds
General
-
Target
de711aef83f7baa89004e1fc3aaee4b5.elf
-
Size
50KB
-
MD5
de711aef83f7baa89004e1fc3aaee4b5
-
SHA1
cd9cda7b7fff8cbb46ec032c7fd0452c93afab69
-
SHA256
1a6964f76f573dd50f41ee8dc4c5b29868807af6326faee92ad9ffaeba3dc5a3
-
SHA512
87bc9861e0d5e0a9bba53062dcbe9c95e5bbac3695c4b12297d1f16a18c8632b49cb77724761c201d5fae7a162360c8ac3413afc282521f11cea5b6fd4b54e2d
-
SSDEEP
1536:PwNgxRZ5yKXLYjUMGk4iP9bSt917zfSa9d3icmxBwbZn:PwCxRuKXLYwkPP9bStT7S23iFjwbZn
Score
7/10
Malware Config
Signatures
-
Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself /var/Sofia 1464 de711aef83f7baa89004e1fc3aaee4b5.elf -
Deletes itself 1 IoCs
pid Process 1464 de711aef83f7baa89004e1fc3aaee4b5.elf -
Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
description ioc Process File opened for modification /tmp/de711aef83f7baa89004e1fc3aaee4b5.elf de711aef83f7baa89004e1fc3aaee4b5.elf