Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
113s -
max time network
114s -
platform
debian-9_armhf -
resource
debian9-armhf-20240226-en -
resource tags
arch:armhfimage:debian9-armhf-20240226-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem -
submitted
19/03/2024, 07:51
Behavioral task
behavioral1
Sample
6f6c5064c482989505ac92818fa11714.elf
Resource
debian9-armhf-20240226-en
2 signatures
150 seconds
General
-
Target
6f6c5064c482989505ac92818fa11714.elf
-
Size
204KB
-
MD5
6f6c5064c482989505ac92818fa11714
-
SHA1
7f2f9abd54620541bb74d1f888cfeecc2f587df8
-
SHA256
4777289b41736111b0dc9ec273422e7da8ef385c4976b980bebaef33ac01b8af
-
SHA512
4726768564347ab9b504823eeca9ef1f284b826f08038e32b015cf480bcf1e38879df7cc8523b5cae12a98c52de36bec8b8fc79532358229553c0956900afe21
-
SSDEEP
6144:FZzyacCwXJ4DbpW0vI5hbL6K2axVOcgym0wfB5RyAn:FZzyacCwXJ4gP5hbMylgym0mB5RyAn
Score
6/10
Malware Config
Signatures
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
description ioc Process File opened for reading /proc/net/route 6f6c5064c482989505ac92818fa11714.elf -
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
description ioc Process File opened for reading /proc/net/route 6f6c5064c482989505ac92818fa11714.elf