Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time network
    150s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20240418-en
  • resource tags

    arch:armhfimage:debian9-armhf-20240418-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    28/05/2024, 14:12

General

  • Target

    afcd4e300eab30a940cf4c062d60f994dc70100310d65ae97569927e3b0376ba.elf

  • Size

    96KB

  • MD5

    7f0edbd5c17774aace4d45dfb521dce6

  • SHA1

    7f0e400ff01d3e0752b909a8979327c14e05395f

  • SHA256

    afcd4e300eab30a940cf4c062d60f994dc70100310d65ae97569927e3b0376ba

  • SHA512

    52c23cd6c8f3c6632f95c32be16eb101027491708b522f21c137ce13fdb2a80107602f6f6ad62ce71e1b4e43a91990d6e905d1e5c1faaeb8b563a07db8c472b6

  • SSDEEP

    1536:vwnT+TU2RnsXNWM5lxwlvs99/TqKLK+zs3ItNhqN9lxJidpi/mWZxY5cuj:EmVheB5lx/TBLK+zs3ItWOpi/mWnlu

Score
9/10

Malware Config

Signatures

  • Contacts a large (76758) amount of remote hosts 1 TTPs

    This may indicate a network scan to discover remotely running services.

  • Creates a large amount of network flows 1 TTPs

    This may indicate a network scan to discover remotely running services.

  • Unexpected DNS network traffic destination 1 IoCs

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads