Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    148s
  • max time network
    149s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20240611-en
  • resource tags

    arch:armhfimage:debian9-armhf-20240611-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    25/09/2024, 14:41

General

  • Target

    8771f66d0e79816bab02485d18d3f2566c54a656b33d731508995c3761681001

  • Size

    122KB

  • MD5

    2145ca5683d623be51c209635b761ff0

  • SHA1

    095ee85aa648de4e557fc243de17d4f00ab2091f

  • SHA256

    8771f66d0e79816bab02485d18d3f2566c54a656b33d731508995c3761681001

  • SHA512

    02263afbfd5b02159773ea4fa9934d48e3169dd9ddf1047f7a83e1e96a6d5d3f461f50ca28d82cf5267561f9de76490283a147e7326d4602f88f2089cbd13b04

  • SSDEEP

    1536:JsDwKexO4ADN97FqdMn7XqWuoig3tDyp7zUlw6wywR/YmR0YQUbkTOKqfdTL2:23evA3FqerqydDy794Ub5TL2

Malware Config

Signatures

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Modifies init.d 2 TTPs 1 IoCs

    Adds/modifies system service, likely for persistence.

  • Reads runtime system information 64 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • /tmp/8771f66d0e79816bab02485d18d3f2566c54a656b33d731508995c3761681001
    /tmp/8771f66d0e79816bab02485d18d3f2566c54a656b33d731508995c3761681001
    1⤵
    • Modifies init.d
    • Reads runtime system information
    PID:639

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads