Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
121s -
max time network
132s -
platform
ubuntu-24.04_amd64 -
resource
ubuntu2404-amd64-20240523-en -
resource tags
arch:amd64arch:i386image:ubuntu2404-amd64-20240523-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system -
submitted
09/07/2024, 01:27
Behavioral task
behavioral1
Sample
4cafa99c027f975a92fc5ba5c17a625c5e5fa45440165673c69e18b353200764.elf
Resource
ubuntu2404-amd64-20240523-en
General
-
Target
4cafa99c027f975a92fc5ba5c17a625c5e5fa45440165673c69e18b353200764.elf
-
Size
106KB
-
MD5
4679962e0c99acd96f4cff8202be192d
-
SHA1
d997ad64149d48d44b67e0ba600dc95593fd05f5
-
SHA256
4cafa99c027f975a92fc5ba5c17a625c5e5fa45440165673c69e18b353200764
-
SHA512
b2e7f6ac9170a26878240980c2af49e5cb31abc0c733681df1ca378353a9af11ab156a908e62cf05b3c97d3b39ff18efbbd7fe06f79559ded8fd41d4990b7d22
-
SSDEEP
3072:j6dye4BmJQ/phaZw/1vc4+AzkSXmdRWaLHgb4:d/phaZchrmdRWaDgb4
Malware Config
Signatures
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
description ioc Process File opened for reading /proc/net/route 4cafa99c027f975a92fc5ba5c17a625c5e5fa45440165673c69e18b353200764.elf -
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
description ioc Process File opened for reading /proc/net/route 4cafa99c027f975a92fc5ba5c17a625c5e5fa45440165673c69e18b353200764.elf