Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
145s -
max time network
150s -
platform
ubuntu-20.04_amd64 -
resource
ubuntu2004-amd64-20240221-en -
resource tags
arch:amd64arch:i386image:ubuntu2004-amd64-20240221-enkernel:5.4.0-169-genericlocale:en-usos:ubuntu-20.04-amd64system -
submitted
15/03/2024, 11:06
Static task
static1
Behavioral task
behavioral1
Sample
7ba7eeac9e7de3aa5c37b895e425fd25.elf
Resource
ubuntu2004-amd64-20240221-en
ubuntu-20.04-amd64
3 signatures
150 seconds
General
-
Target
7ba7eeac9e7de3aa5c37b895e425fd25.elf
-
Size
89KB
-
MD5
7ba7eeac9e7de3aa5c37b895e425fd25
-
SHA1
43382f8bfaf01c1e0e19fe2e2ae07e7a010efbf9
-
SHA256
182345e169e36e6573f54af8e407430f76977a3dc0ace399a9243bf615c50e01
-
SHA512
daa5f0bc3b34151d103b47518c517a4f058e7ab736173c89337f020add35538bcf9741a653fd31654a6924d88fead413aa12c2c4f1fa8ff697f922b016fea2bc
-
SSDEEP
1536:7FC5g7zNZp+YOyiqMf3i+gkHYxWhgfGSdRXXq:7FCCNZpdDx63dgjxb/dU
Score
7/10
Malware Config
Signatures
-
Changes its process name 1 IoCs
description pid Process Changes the process name, possibly in an attempt to hide itself 1466 7ba7eeac9e7de3aa5c37b895e425fd25.elf -
Enumerates running processes
Discovers information about currently running processes on the system
-
Reads runtime system information 64 IoCs
Reads data from /proc virtual filesystem.
description ioc File opened for reading /proc/70/status File opened for reading /proc/930/status File opened for reading /proc/1114/status File opened for reading /proc/1520/status File opened for reading /proc/1130/status File opened for reading /proc/1069/status File opened for reading /proc/1449/status File opened for reading /proc/71/status File opened for reading /proc/453/status File opened for reading /proc/1079/status File opened for reading /proc/1415/status File opened for reading /proc/1814/status File opened for reading /proc/1421/status File opened for reading /proc/89/status File opened for reading /proc/451/status File opened for reading /proc/853/status File opened for reading /proc/2003/status File opened for reading /proc/612/status File opened for reading /proc/1094/status File opened for reading /proc/85/status File opened for reading /proc/1006/status File opened for reading /proc/1314/status File opened for reading /proc/1469/status File opened for reading /proc/1474/status File opened for reading /proc/498/status File opened for reading /proc/2000/status File opened for reading /proc/2/status File opened for reading /proc/21/status File opened for reading /proc/1406/status File opened for reading /proc/79/status File opened for reading /proc/84/status File opened for reading /proc/1516/status File opened for reading /proc/11/status File opened for reading /proc/170/status File opened for reading /proc/579/status File opened for reading /proc/588/status File opened for reading /proc/763/status File opened for reading /proc/242/status File opened for reading /proc/172/status File opened for reading /proc/662/status File opened for reading /proc/1097/status File opened for reading /proc/561/status File opened for reading /proc/816/status File opened for reading /proc/1407/status File opened for reading /proc/1423/status File opened for reading /proc/1404/status File opened for reading /proc/1448/status File opened for reading /proc/1522/status File opened for reading /proc/161/status File opened for reading /proc/310/status File opened for reading /proc/613/status File opened for reading /proc/947/status File opened for reading /proc/1088/status File opened for reading /proc/1882/status File opened for reading /proc/476/status File opened for reading /proc/1290/status File opened for reading /proc/1436/status File opened for reading /proc/9/status File opened for reading /proc/162/status File opened for reading /proc/471/status File opened for reading /proc/22/status File opened for reading /proc/175/status File opened for reading /proc/780/status File opened for reading /proc/1913/status