Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
149s -
max time network
151s -
platform
debian-9_armhf -
resource
debian9-armhf-20240226-en -
resource tags
arch:armhfimage:debian9-armhf-20240226-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem -
submitted
11/04/2024, 01:27
Behavioral task
behavioral1
Sample
75d86660e39f375c9c35106f06b3e7fe66f72077998af574815ade55ce1877f4.elf
Resource
debian9-armhf-20240226-en
General
-
Target
75d86660e39f375c9c35106f06b3e7fe66f72077998af574815ade55ce1877f4.elf
-
Size
105KB
-
MD5
a96c404435b48a58d0febd40ed25df3d
-
SHA1
ea3b689e74500057671206a9f17f306b059928b7
-
SHA256
75d86660e39f375c9c35106f06b3e7fe66f72077998af574815ade55ce1877f4
-
SHA512
eb41c55742f66c79de6b2c4a781ea882531a19a237192fc58d049ed82bb5683edb1e8b640baab6b34517910d378d66fd47483f553b7b1a8fbdfa3fbc725d4224
-
SSDEEP
3072:MSY+46m1qOzssBFPPKNy+AmkZrQAhPDCXFke:06mgOzJBFPzmkZrQAhPDCXFke
Malware Config
Signatures
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
description ioc Process File opened for reading /proc/net/route 75d86660e39f375c9c35106f06b3e7fe66f72077998af574815ade55ce1877f4.elf -
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
description ioc Process File opened for reading /proc/net/route 75d86660e39f375c9c35106f06b3e7fe66f72077998af574815ade55ce1877f4.elf