Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
148s -
max time network
152s -
platform
ubuntu-24.04_amd64 -
resource
ubuntu2404-amd64-20240523-en -
resource tags
arch:amd64arch:i386image:ubuntu2404-amd64-20240523-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system -
submitted
14/10/2024, 05:22
Static task
static1
Behavioral task
behavioral1
Sample
na.elf
Resource
ubuntu2404-amd64-20240523-en
1 signatures
150 seconds
General
-
Target
na.elf
-
Size
7.2MB
-
MD5
4879e2ff1e8610b637161384128db893
-
SHA1
5d8a5b6e606520d018bfc5604ce4b1bea6e3c388
-
SHA256
64bfc2b4ff6efffeeed0db5aa499d5eab651fd5436d5a49b15e796d3c9e7628d
-
SHA512
56364abf20006ea3807833ab4e87b8426d82a1506df545a04c8ba451497883ae065883f0311c13abb0c30fbbc3ec6802e637c98e5f5cd9441270f25252d466ab
-
SSDEEP
98304:Qgh10bob99FzDrRvoWPx/OP6v6J3TYQv1oQJE5mB:40rhDtJmCaTY7QxB
Score
7/10
Malware Config
Signatures
-
Loads a kernel module 20 IoCs
Loads a Linux kernel module, potentially to achieve persistence
pid Process 2825 na.elf 2825 na.elf 2825 na.elf 2825 na.elf 2827 na.elf 2825 na.elf 2825 na.elf 2828 na.elf 2825 na.elf 2825 na.elf 2829 na.elf 2825 na.elf 2829 na.elf 2829 na.elf 2829 na.elf 2829 na.elf 2829 na.elf 2830 na.elf 2829 na.elf 2831 na.elf