Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    139s
  • max time network
    142s
  • platform
    ubuntu-20.04_amd64
  • resource
    ubuntu2004-amd64-20240221-en
  • resource tags

    arch:amd64arch:i386image:ubuntu2004-amd64-20240221-enkernel:5.4.0-169-genericlocale:en-usos:ubuntu-20.04-amd64system
  • submitted
    15/03/2024, 07:56

General

  • Target

    de711aef83f7baa89004e1fc3aaee4b5.elf

  • Size

    50KB

  • MD5

    de711aef83f7baa89004e1fc3aaee4b5

  • SHA1

    cd9cda7b7fff8cbb46ec032c7fd0452c93afab69

  • SHA256

    1a6964f76f573dd50f41ee8dc4c5b29868807af6326faee92ad9ffaeba3dc5a3

  • SHA512

    87bc9861e0d5e0a9bba53062dcbe9c95e5bbac3695c4b12297d1f16a18c8632b49cb77724761c201d5fae7a162360c8ac3413afc282521f11cea5b6fd4b54e2d

  • SSDEEP

    1536:PwNgxRZ5yKXLYjUMGk4iP9bSt917zfSa9d3icmxBwbZn:PwCxRuKXLYwkPP9bStT7S23iFjwbZn

Score
7/10

Malware Config

Signatures

  • Changes its process name 1 IoCs
  • Deletes itself 1 IoCs
  • Writes file to tmp directory 1 IoCs

    Malware often drops required files in the /tmp directory.

Processes

  • /tmp/de711aef83f7baa89004e1fc3aaee4b5.elf
    /tmp/de711aef83f7baa89004e1fc3aaee4b5.elf
    1⤵
    • Changes its process name
    • Deletes itself
    • Writes file to tmp directory
    PID:1464

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads