Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
142s -
platform
debian-9_mipsel -
resource
debian9-mipsel-20240226-en -
resource tags
arch:mipselimage:debian9-mipsel-20240226-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem -
submitted
25/04/2024, 12:40
Behavioral task
behavioral1
Sample
9d3e3d778deebe1ed391ba197485cbd8.elf
Resource
debian9-mipsel-20240226-en
debian-9-mipsel
3 signatures
150 seconds
General
-
Target
9d3e3d778deebe1ed391ba197485cbd8.elf
-
Size
177KB
-
MD5
9d3e3d778deebe1ed391ba197485cbd8
-
SHA1
76afe36cb1b76c3df0ce13490f618ddc01456c23
-
SHA256
a136eb44d420b4480c6795218f13cef278e0ee690259a9b2b46e171ed6010471
-
SHA512
14b25d9d53a7faa8ef2baddfdd9a97099f97241eac314b2d34971aa8d72ce5a3d5ca5caabdb849488b8cf5899e6085ecf2aa3204e19ef88ac435ba9a0243e0c8
-
SSDEEP
1536:IIV+hOVLgDklrSb3BRmZnf3gZCQsyav5yLhrAWoeZi2lOXZFeBG3Dfh/ZM0882AY:IIV+hOVsDcyyZnfU9r3TQje6fhE82WM
Score
6/10
Malware Config
Signatures
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself M C 701 9d3e3d778deebe1ed391ba197485cbd8.elf -
Reads runtime system information 64 IoCs
Reads data from /proc virtual filesystem.
description ioc Process File opened for reading /proc/801/cmdline 9d3e3d778deebe1ed391ba197485cbd8.elf File opened for reading /proc/4/cmdline 9d3e3d778deebe1ed391ba197485cbd8.elf File opened for reading /proc/513/cmdline 9d3e3d778deebe1ed391ba197485cbd8.elf File opened for reading /proc/703/cmdline 9d3e3d778deebe1ed391ba197485cbd8.elf File opened for reading /proc/764/cmdline 9d3e3d778deebe1ed391ba197485cbd8.elf File opened for reading /proc/791/cmdline 9d3e3d778deebe1ed391ba197485cbd8.elf File opened for reading /proc/21/cmdline 9d3e3d778deebe1ed391ba197485cbd8.elf File opened for reading /proc/71/cmdline 9d3e3d778deebe1ed391ba197485cbd8.elf File opened for reading /proc/770/cmdline 9d3e3d778deebe1ed391ba197485cbd8.elf File opened for reading /proc/798/cmdline 9d3e3d778deebe1ed391ba197485cbd8.elf File opened for reading /proc/776/cmdline 9d3e3d778deebe1ed391ba197485cbd8.elf File opened for reading /proc/785/cmdline 9d3e3d778deebe1ed391ba197485cbd8.elf File opened for reading /proc/15/cmdline 9d3e3d778deebe1ed391ba197485cbd8.elf File opened for reading /proc/20/cmdline 9d3e3d778deebe1ed391ba197485cbd8.elf File opened for reading /proc/700/cmdline 9d3e3d778deebe1ed391ba197485cbd8.elf File opened for reading /proc/736/cmdline 9d3e3d778deebe1ed391ba197485cbd8.elf File opened for reading /proc/763/cmdline 9d3e3d778deebe1ed391ba197485cbd8.elf File opened for reading /proc/10/cmdline 9d3e3d778deebe1ed391ba197485cbd8.elf File opened for reading /proc/12/cmdline 9d3e3d778deebe1ed391ba197485cbd8.elf File opened for reading /proc/14/cmdline 9d3e3d778deebe1ed391ba197485cbd8.elf File opened for reading /proc/70/cmdline 9d3e3d778deebe1ed391ba197485cbd8.elf File opened for reading /proc/76/cmdline 9d3e3d778deebe1ed391ba197485cbd8.elf File opened for reading /proc/766/cmdline 9d3e3d778deebe1ed391ba197485cbd8.elf File opened for reading /proc/775/cmdline 9d3e3d778deebe1ed391ba197485cbd8.elf File opened for reading /proc/796/cmdline 9d3e3d778deebe1ed391ba197485cbd8.elf File opened for reading /proc/316/cmdline 9d3e3d778deebe1ed391ba197485cbd8.elf File opened for reading /proc/500/cmdline 9d3e3d778deebe1ed391ba197485cbd8.elf File opened for reading /proc/693/cmdline 9d3e3d778deebe1ed391ba197485cbd8.elf File opened for reading /proc/754/cmdline 9d3e3d778deebe1ed391ba197485cbd8.elf File opened for reading /proc/789/cmdline 9d3e3d778deebe1ed391ba197485cbd8.elf File opened for reading /proc/720/cmdline 9d3e3d778deebe1ed391ba197485cbd8.elf File opened for reading /proc/721/cmdline 9d3e3d778deebe1ed391ba197485cbd8.elf File opened for reading /proc/729/cmdline 9d3e3d778deebe1ed391ba197485cbd8.elf File opened for reading /proc/23/cmdline 9d3e3d778deebe1ed391ba197485cbd8.elf File opened for reading /proc/79/cmdline 9d3e3d778deebe1ed391ba197485cbd8.elf File opened for reading /proc/148/cmdline 9d3e3d778deebe1ed391ba197485cbd8.elf File opened for reading /proc/397/cmdline 9d3e3d778deebe1ed391ba197485cbd8.elf File opened for reading /proc/694/cmdline 9d3e3d778deebe1ed391ba197485cbd8.elf File opened for reading /proc/741/cmdline 9d3e3d778deebe1ed391ba197485cbd8.elf File opened for reading /proc/756/cmdline 9d3e3d778deebe1ed391ba197485cbd8.elf File opened for reading /proc/792/cmdline 9d3e3d778deebe1ed391ba197485cbd8.elf File opened for reading /proc/69/cmdline 9d3e3d778deebe1ed391ba197485cbd8.elf File opened for reading /proc/82/cmdline 9d3e3d778deebe1ed391ba197485cbd8.elf File opened for reading /proc/319/cmdline 9d3e3d778deebe1ed391ba197485cbd8.elf File opened for reading /proc/552/cmdline 9d3e3d778deebe1ed391ba197485cbd8.elf File opened for reading /proc/752/cmdline 9d3e3d778deebe1ed391ba197485cbd8.elf File opened for reading /proc/809/cmdline 9d3e3d778deebe1ed391ba197485cbd8.elf File opened for reading /proc/72/cmdline 9d3e3d778deebe1ed391ba197485cbd8.elf File opened for reading /proc/723/cmdline 9d3e3d778deebe1ed391ba197485cbd8.elf File opened for reading /proc/750/cmdline 9d3e3d778deebe1ed391ba197485cbd8.elf File opened for reading /proc/768/cmdline 9d3e3d778deebe1ed391ba197485cbd8.elf File opened for reading /proc/790/cmdline 9d3e3d778deebe1ed391ba197485cbd8.elf File opened for reading /proc/77/cmdline 9d3e3d778deebe1ed391ba197485cbd8.elf File opened for reading /proc/548/cmdline 9d3e3d778deebe1ed391ba197485cbd8.elf File opened for reading /proc/714/cmdline 9d3e3d778deebe1ed391ba197485cbd8.elf File opened for reading /proc/743/cmdline 9d3e3d778deebe1ed391ba197485cbd8.elf File opened for reading /proc/777/cmdline 9d3e3d778deebe1ed391ba197485cbd8.elf File opened for reading /proc/730/cmdline 9d3e3d778deebe1ed391ba197485cbd8.elf File opened for reading /proc/774/cmdline 9d3e3d778deebe1ed391ba197485cbd8.elf File opened for reading /proc/712/cmdline 9d3e3d778deebe1ed391ba197485cbd8.elf File opened for reading /proc/744/cmdline 9d3e3d778deebe1ed391ba197485cbd8.elf File opened for reading /proc/2/cmdline 9d3e3d778deebe1ed391ba197485cbd8.elf File opened for reading /proc/18/cmdline 9d3e3d778deebe1ed391ba197485cbd8.elf File opened for reading /proc/315/cmdline 9d3e3d778deebe1ed391ba197485cbd8.elf