Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

1

3061702.bin

ubuntu-22.04-amd64

7

Resubmissions

06/08/2024, 15:01

240806-sd4bmswcja 7

06/08/2024, 14:24

240806-rq56bsvfpa 1

06/08/2024, 13:16

240806-qhrsaszfjn 7

Analysis

  • max time kernel
    1199s
  • max time network
    1173s
  • platform
    ubuntu-22.04_amd64
  • resource
    ubuntu2204-amd64-20240611-en
  • resource tags

    arch:amd64arch:i386image:ubuntu2204-amd64-20240611-enkernel:5.15.0-105-genericlocale:en-usos:ubuntu-22.04-amd64system
  • submitted
    06/08/2024, 13:16

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    3061702.bin

  • Size

    80KB

  • MD5

    a975959cae20e53102a5e6202692b533

  • SHA1

    9665799c84f0eff052a57c3205b1a515adc39278

  • SHA256

    c0dee466b4592979a08e2d9176d3e1515a631268db2c5887faa8474aefeece5b

  • SHA512

    f06c339ee01792d6cbab0c37038a70e69150b9b009aaafeb3244f3cb9b8f2f13f1b1ea3aebceecef6b395ffd133f1d25a51d648569598716332a14c91a35c574

  • SSDEEP

    1536:RWsfKVotw2uYh6g+FB3SYFjgaiZBflluFl1bSzLm9xX/X/LA7MpzX:RWsfKVotw2uYYg+FB37FBc981bSzLmPR

Score
7/10
persistence

Malware Config

Signatures

  • Renames itself 1 IoCs
  • Creates/modifies Cron job 1 TTPs 1 IoCs

    Cron allows running tasks on a schedule, and is commonly used for malware persistence.

    persistence
  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Reads runtime system information 64 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • /tmp/3061702.bin
    /tmp/3061702.bin
    1⤵
    • Reads runtime system information
    PID:1578
    • /bin/sh
      sh -c "crontab -l"
      2⤵
        PID:1580
        • /usr/bin/crontab
          crontab -l
          3⤵
            PID:1581
        • /bin/sh
          sh -c "crontab -"
          2⤵
            PID:1588
            • /usr/bin/crontab
              crontab -
              3⤵
              • Creates/modifies Cron job
              PID:1590

        Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /var/spool/cron/crontabs/tmp.fo0VRj
          Filesize

          210B

          MD5

          8978cfa6f4f88493d1a5a1c046524c56

          SHA1

          8a89dfe22e04771ee8facaf2ff5dc3b732eba7aa

          SHA256

          ff11f2f20c87a3a0f85b43ae6af0229145fe3818a8a52a5f5a227c31c7758940

          SHA512

          15a25fcf3f827ef63a4d2cfba11e135297c26fb57d1e28554a4803276f92982b153e0d909e22dc0c70ce82e1b221116a68d665662064be6b4dc1b962935b7890

          Download Submit