Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

1

x.nn

ubuntu-22.04-amd64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    x.nn

  • Size

    76KB

  • Sample

    240908-w5d3lsshlg

  • MD5

    973a64d7c0dfa2aa3fdeeed0b15b14bb

  • SHA1

    9533d5194a3d9c6ced530a2f300f0edfa5cccb69

  • SHA256

    15d168a0a401611890ff27e5cc69edde969d42defa25a82758d8401804bc04ec

  • SHA512

    028b138d464485de35094f3754ff6a3d917a50181cd28f1633fa5fb2bc672bcc739dfdd2cdccde1b7393c8caf3009bb58383775d591de8caea9f96c7caaa1079

  • SSDEEP

    1536:/l1h73pl93YNjnYhd0t++IXonF9dzeet7TxOrQy:tb0jnYhd7ovtD/mQy

Score
9/10
defense_evasiondiscoverylinuxpersistence

Malware Config

Targets

    • Target

      x.nn

    • Size

      76KB

    • MD5

      973a64d7c0dfa2aa3fdeeed0b15b14bb

    • SHA1

      9533d5194a3d9c6ced530a2f300f0edfa5cccb69

    • SHA256

      15d168a0a401611890ff27e5cc69edde969d42defa25a82758d8401804bc04ec

    • SHA512

      028b138d464485de35094f3754ff6a3d917a50181cd28f1633fa5fb2bc672bcc739dfdd2cdccde1b7393c8caf3009bb58383775d591de8caea9f96c7caaa1079

    • SSDEEP

      1536:/l1h73pl93YNjnYhd0t++IXonF9dzeet7TxOrQy:tb0jnYhd7ovtD/mQy

    Score
    9/10
    defense_evasiondiscoverypersistence

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • File and Directory Permissions Modification

      Adversaries may modify file or directory permissions to evade defenses.

      defense_evasion

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

      defense_evasion

    • Modifies init.d

      Adds/modifies system service, likely for persistence.

      persistence

    • Modifies rc script

      Adding/modifying system rc scripts is a common persistence mechanism.

      persistence
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks