Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    141s
  • max time network
    178s
  • platform
    debian-9_mips
  • resource
    debian9-mipsbe-20240226-en
  • resource tags

    arch:mipsimage:debian9-mipsbe-20240226-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
  • submitted
    16/03/2024, 01:35

General

  • Target

    5d6230eb45280135c1e5bf43b45ba8c1a64c4a9af8cb822845d691b3706d8068.elf

  • Size

    110KB

  • MD5

    79e2f80678e32f7a8e4acaeb503a99cd

  • SHA1

    ad92e126bea61a78d7cf3fd903a75d9fc9cffce7

  • SHA256

    5d6230eb45280135c1e5bf43b45ba8c1a64c4a9af8cb822845d691b3706d8068

  • SHA512

    24a540cec51ec5ab69642a5cee5d8e4598d195f9a365aff0b2f34ba38d09da9932091c63873f1525db0905ffbab3c8a332f7849e42a4be429d629cd37dd06f6e

  • SSDEEP

    3072:R/4tNF9U4vvyKw6J73x8UmkiSFxfKxbXe:BUNFK+y8T8UmkiSFxfKxbXe

Score
6/10

Malware Config

Signatures

  • Reads system routing table 1 TTPs 1 IoCs

    Gets active network interfaces from /proc virtual filesystem.

  • Reads system network configuration 1 TTPs 1 IoCs

    Uses contents of /proc filesystem to enumerate network settings.

Processes

  • /tmp/5d6230eb45280135c1e5bf43b45ba8c1a64c4a9af8cb822845d691b3706d8068.elf
    /tmp/5d6230eb45280135c1e5bf43b45ba8c1a64c4a9af8cb822845d691b3706d8068.elf
    1⤵
    • Reads system routing table
    • Reads system network configuration
    PID:697

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads