Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
140s -
max time network
151s -
platform
ubuntu-20.04_amd64 -
resource
ubuntu2004-amd64-20240221-en -
resource tags
arch:amd64arch:i386image:ubuntu2004-amd64-20240221-enkernel:5.4.0-169-genericlocale:en-usos:ubuntu-20.04-amd64system -
submitted
11/04/2024, 01:13
Behavioral task
behavioral1
Sample
4317da3436c1ad0d5f52a7edeebdf63b1727db49e87a551b06aed231389b85d9.elf
Resource
ubuntu2004-amd64-20240221-en
General
-
Target
4317da3436c1ad0d5f52a7edeebdf63b1727db49e87a551b06aed231389b85d9.elf
-
Size
71KB
-
MD5
b82fda95d1bc28aa69e2f276538c8d9e
-
SHA1
97acf99ad28734e9df6876c1f8545d60a38bbf0c
-
SHA256
4317da3436c1ad0d5f52a7edeebdf63b1727db49e87a551b06aed231389b85d9
-
SHA512
e0d604aac8b5a50cf4b8333c8858d8fae7a25bb5ac58b4e4db04c42028396bfd4703c267be31480af7e5f450a40a78beb571428d15e9970454cb99cfd193839d
-
SSDEEP
1536:hIxMrhJX9gW2CvPAaSyAuWPuqhkcyEnmx+LVO049unnuY:4MrhJXeW2CXAaoXWojyQm4LVO0iunnuY
Malware Config
Signatures
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
description ioc Process File opened for reading /proc/net/route 4317da3436c1ad0d5f52a7edeebdf63b1727db49e87a551b06aed231389b85d9.elf -
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
description ioc Process File opened for reading /proc/net/route 4317da3436c1ad0d5f52a7edeebdf63b1727db49e87a551b06aed231389b85d9.elf