Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

1e7f0ad6f4...a9.elf

debian-9-armhf

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1e7f0ad6f4c47c09786c5ef1df5dc9e23af63899437bf42e5dd09789378ff6a9.elf

  • Size

    161KB

  • Sample

    241205-cm4qrsypdp

  • MD5

    57e10fd1d7754fe9f5c25709c4b15014

  • SHA1

    92f5a85561ed547d055cf484165e7d310533c124

  • SHA256

    1e7f0ad6f4c47c09786c5ef1df5dc9e23af63899437bf42e5dd09789378ff6a9

  • SHA512

    a420bc0e629052978a122253cdeed0c7b8a961feabc005c57f43824587445ea14905d4b1e19d3e0fac94e9bf2ff8faaf33298e057800258c88d82e154d635ea8

  • SSDEEP

    3072:fywgcFqA5RXHX72MORPiXVN6eXLBYwArfyDujp+SmjlliUmh:lvFKMOZUN6eXLyPKDujp+SmjlliUmh

Score
10/10
gafgytdefense_evasiondiscovery

Malware Config

Targets

    • Target

      1e7f0ad6f4c47c09786c5ef1df5dc9e23af63899437bf42e5dd09789378ff6a9.elf

    • Size

      161KB

    • MD5

      57e10fd1d7754fe9f5c25709c4b15014

    • SHA1

      92f5a85561ed547d055cf484165e7d310533c124

    • SHA256

      1e7f0ad6f4c47c09786c5ef1df5dc9e23af63899437bf42e5dd09789378ff6a9

    • SHA512

      a420bc0e629052978a122253cdeed0c7b8a961feabc005c57f43824587445ea14905d4b1e19d3e0fac94e9bf2ff8faaf33298e057800258c88d82e154d635ea8

    • SSDEEP

      3072:fywgcFqA5RXHX72MORPiXVN6eXLBYwArfyDujp+SmjlliUmh:lvFKMOZUN6eXLyPKDujp+SmjlliUmh

    Score
    9/10
    defense_evasiondiscovery

    • Contacts a large (68770) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

      defense_evasion

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks