9d4bdadfb9b82a885dc4a67bb16f2f859ecf3b1150deb7cd2c556ac7a408f7eb

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

Static

static

python-zer...OG.vbs

windows7-x64

python-zer...OG.vbs

windows10-2004-x64

python-zer...ory.py

windows7-x64

python-zer...ory.py

windows10-2004-x64

python-zer...ing.py

windows7-x64

python-zer...ing.py

windows10-2004-x64

python-zer...ing.py

windows7-x64

python-zer...ing.py

windows10-2004-x64

python-zer...ies.py

windows7-x64

python-zer...ies.py

windows10-2004-x64

python-zer...ext.py

windows7-x64

python-zer...ext.py

windows10-2004-x64

python-zer...onf.py

windows7-x64

python-zer...onf.py

windows10-2004-x64

python-zer...ner.py

ubuntu-18.04-amd64

python-zer...ner.py

debian-9-armhf

python-zer...ner.py

debian-9-mips

python-zer...ner.py

debian-9-mipsel

python-zer...ser.py

ubuntu-18.04-amd64

python-zer...ser.py

debian-9-armhf

python-zer...ser.py

debian-9-mips

python-zer...ser.py

debian-9-mipsel

python-zer...ion.py

ubuntu-18.04-amd64

python-zer...ion.py

debian-9-armhf

python-zer...ion.py

debian-9-mips

python-zer...ion.py

debian-9-mipsel

python-zer...est.py

ubuntu-18.04-amd64

python-zer...est.py

debian-9-armhf

python-zer...est.py

debian-9-mips

python-zer...est.py

debian-9-mipsel

python-zer...ser.py

ubuntu-18.04-amd64

python-zer...ser.py

debian-9-armhf

Analysis

max time kernel
1s
platform
debian-9_armhf
resource
debian9-armhf-20240418-en
resource tags

arch:armhfimage:debian9-armhf-20240418-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
08/09/2024, 03:45

Sharing

Copy URL

Twitter E-mail

Static task

static1

Behavioral task

behavioral1

Sample

python-zeroconf-python-zeroconf-3c9b17f/CHANGELOG.vbs

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

python-zeroconf-python-zeroconf-3c9b17f/CHANGELOG.vbs

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

python-zeroconf-python-zeroconf-3c9b17f/bench/create_destory.py

Resource

win7-20240729-en

discovery

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral4

Sample

python-zeroconf-python-zeroconf-3c9b17f/bench/create_destory.py

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral5

Sample

python-zeroconf-python-zeroconf-3c9b17f/bench/incoming.py

Resource

win7-20240903-en

discovery

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral6

Sample

python-zeroconf-python-zeroconf-3c9b17f/bench/incoming.py

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral7

Sample

python-zeroconf-python-zeroconf-3c9b17f/bench/outgoing.py

Resource

win7-20240903-en

discovery

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral8

Sample

python-zeroconf-python-zeroconf-3c9b17f/bench/outgoing.py

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

python-zeroconf-python-zeroconf-3c9b17f/bench/txt_properties.py

Resource

win7-20240903-en

discovery

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral10

Sample

python-zeroconf-python-zeroconf-3c9b17f/bench/txt_properties.py

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral11

Sample

python-zeroconf-python-zeroconf-3c9b17f/build_ext.py

Resource

win7-20240708-en

discovery

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral12

Sample

python-zeroconf-python-zeroconf-3c9b17f/build_ext.py

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral13

Sample

python-zeroconf-python-zeroconf-3c9b17f/docs/conf.py

Resource

win7-20240708-en

discovery

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral14

Sample

python-zeroconf-python-zeroconf-3c9b17f/docs/conf.py

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral15

Sample

python-zeroconf-python-zeroconf-3c9b17f/examples/async_apple_scanner.py

Resource

ubuntu1804-amd64-20240611-en

execution

ubuntu-18.04-amd64

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

python-zeroconf-python-zeroconf-3c9b17f/examples/async_apple_scanner.py

Resource

debian9-armhf-20240611-en

execution

debian-9-armhf

1 signatures

150 seconds

Behavioral task

behavioral17

Sample

python-zeroconf-python-zeroconf-3c9b17f/examples/async_apple_scanner.py

Resource

debian9-mipsbe-20240611-en

execution

debian-9-mips

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

python-zeroconf-python-zeroconf-3c9b17f/examples/async_apple_scanner.py

Resource

debian9-mipsel-20240611-en

execution

debian-9-mipsel

1 signatures

150 seconds

Behavioral task

behavioral19

Sample

python-zeroconf-python-zeroconf-3c9b17f/examples/async_browser.py

Resource

ubuntu1804-amd64-20240729-en

execution

ubuntu-18.04-amd64

1 signatures

150 seconds

Behavioral task

behavioral20

Sample

python-zeroconf-python-zeroconf-3c9b17f/examples/async_browser.py

Resource

debian9-armhf-20240418-en

execution

debian-9-armhf

1 signatures

150 seconds

Behavioral task

behavioral21

Sample

python-zeroconf-python-zeroconf-3c9b17f/examples/async_browser.py

Resource

debian9-mipsbe-20240611-en

execution

debian-9-mips

1 signatures

150 seconds

Behavioral task

behavioral22

Sample

python-zeroconf-python-zeroconf-3c9b17f/examples/async_browser.py

Resource

debian9-mipsel-20240729-en

execution

debian-9-mipsel

1 signatures

150 seconds

Behavioral task

behavioral23

Sample

python-zeroconf-python-zeroconf-3c9b17f/examples/async_registration.py

Resource

ubuntu1804-amd64-20240508-en

execution

ubuntu-18.04-amd64

1 signatures

150 seconds

Behavioral task

behavioral24

Sample

python-zeroconf-python-zeroconf-3c9b17f/examples/async_registration.py

Resource

debian9-armhf-20240611-en

execution

debian-9-armhf

1 signatures

150 seconds

Behavioral task

behavioral25

Sample

python-zeroconf-python-zeroconf-3c9b17f/examples/async_registration.py

Resource

debian9-mipsbe-20240611-en

execution

debian-9-mips

1 signatures

150 seconds

Behavioral task

behavioral26

Sample

python-zeroconf-python-zeroconf-3c9b17f/examples/async_registration.py

Resource

debian9-mipsel-20240226-en

execution

debian-9-mipsel

1 signatures

150 seconds

Behavioral task

behavioral27

Sample

python-zeroconf-python-zeroconf-3c9b17f/examples/async_service_info_request.py

Resource

ubuntu1804-amd64-20240729-en

execution

ubuntu-18.04-amd64

1 signatures

150 seconds

Behavioral task

behavioral28

Sample

python-zeroconf-python-zeroconf-3c9b17f/examples/async_service_info_request.py

Resource

debian9-armhf-20240418-en

execution

debian-9-armhf

1 signatures

150 seconds

Behavioral task

behavioral29

Sample

python-zeroconf-python-zeroconf-3c9b17f/examples/async_service_info_request.py

Resource

debian9-mipsbe-20240611-en

execution

debian-9-mips

1 signatures

150 seconds

Behavioral task

behavioral30

Sample

python-zeroconf-python-zeroconf-3c9b17f/examples/async_service_info_request.py

Resource

debian9-mipsel-20240611-en

execution

debian-9-mipsel

1 signatures

150 seconds

Behavioral task

behavioral31

Sample

python-zeroconf-python-zeroconf-3c9b17f/examples/browser.py

Resource

ubuntu1804-amd64-20240729-en

execution

ubuntu-18.04-amd64

1 signatures

150 seconds

Behavioral task

behavioral32

Sample

python-zeroconf-python-zeroconf-3c9b17f/examples/browser.py

Resource

debian9-armhf-20240418-en

execution

debian-9-armhf

1 signatures

150 seconds

Report Analysis Logs

General

Target

python-zeroconf-python-zeroconf-3c9b17f/examples/browser.py
Size

2KB
MD5

998baf12ee95682a16430804280f2ff4
SHA1

02d188f7738db455bf769c32727bac5b9e87255c
SHA256

79b1af9107556f4fb2e4722e103028e1e3b678d6ecde49a6eb50532c0818d0fb
SHA512

b8532fbc8fb45cd723f7e6d8fe88a80b7366fa8243568fa946712a6aac98f0219cd189b0c81c419ae7d26a07c0b16cd89cf060d672dc67a031a5a8e3204336b0

Score

3^/10

execution

Malware Config

Signatures

Command and Scripting Interpreter: Python 1 TTPs 4 IoCs

Execution via Python.

execution

Python

T1059.006

pid	Process
653	python3
653	python3
653	python3
653	python3

Processes

/tmp/python-zeroconf-python-zeroconf-3c9b17f/examples/browser.py
/tmp/python-zeroconf-python-zeroconf-3c9b17f/examples/browser.py
1⤵
PID:653

/usr/local/sbin/python3
python3 /tmp/python-zeroconf-python-zeroconf-3c9b17f/examples/browser.py
1⤵
- Command and Scripting Interpreter: Python
PID:653

/usr/local/bin/python3
python3 /tmp/python-zeroconf-python-zeroconf-3c9b17f/examples/browser.py
1⤵
- Command and Scripting Interpreter: Python
PID:653

/usr/sbin/python3
python3 /tmp/python-zeroconf-python-zeroconf-3c9b17f/examples/browser.py
1⤵
- Command and Scripting Interpreter: Python
PID:653

/usr/bin/python3
python3 /tmp/python-zeroconf-python-zeroconf-3c9b17f/examples/browser.py
1⤵
- Command and Scripting Interpreter: Python
PID:653

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Python

T1059.006

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads