Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
149s -
max time network
152s -
platform
ubuntu-24.04_amd64 -
resource
ubuntu2404-amd64-20240523-en -
resource tags
arch:amd64arch:i386image:ubuntu2404-amd64-20240523-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system -
submitted
10/12/2024, 17:28
General
-
Target
hax.x86.elf
-
Size
48KB
-
MD5
e0cfc03055c966a48ae98ecbf72a53fb
-
SHA1
2dbd50296689603849e4cbb7518ac764b0a6f04c
-
SHA256
c9d835c42e386c9ac2c3803b1bbef7b249550f7b4eed722bca6ab9ffec1ddd00
-
SHA512
2687e3ee0b11a4bf4e02c2dcf33a331d52d6284f0434ce0592619708a6be0a258d19a6c006055d1bb24d990d91356bc5c229932db01b56ea0dd8d1248ef79668
-
SSDEEP
1536:sNPiSW9bDsdy1oeD3LEtFHwSjFLxwFCLgoE:DSWxYdy1oeD3LqFHHFxwuB
Malware Config
Signatures
-
Contacts a large (80172) amount of remote hosts 1 TTPs
This may indicate a network scan to discover remotely running services.
-
Creates a large amount of network flows 1 TTPs
This may indicate a network scan to discover remotely running services.
-
Loads a kernel module 64 IoCs
Loads a Linux kernel module, potentially to achieve persistence
pid Process 2825 hax.x86.elf 2827 hax.x86.elf 2827 hax.x86.elf 2827 hax.x86.elf 2827 hax.x86.elf 2827 hax.x86.elf 2827 hax.x86.elf 2827 hax.x86.elf 2827 hax.x86.elf 2827 hax.x86.elf 2827 hax.x86.elf 2827 hax.x86.elf 2827 hax.x86.elf 2827 hax.x86.elf 2827 hax.x86.elf 2827 hax.x86.elf 2827 hax.x86.elf 2827 hax.x86.elf 2827 hax.x86.elf 2827 hax.x86.elf 2827 hax.x86.elf 2827 hax.x86.elf 2827 hax.x86.elf 2827 hax.x86.elf 2827 hax.x86.elf 2827 hax.x86.elf 2827 hax.x86.elf 2827 hax.x86.elf 2827 hax.x86.elf 2827 hax.x86.elf 2827 hax.x86.elf 2827 hax.x86.elf 2827 hax.x86.elf 2827 hax.x86.elf 2827 hax.x86.elf 2827 hax.x86.elf 2827 hax.x86.elf 2827 hax.x86.elf 2827 hax.x86.elf 2827 hax.x86.elf 2827 hax.x86.elf 2827 hax.x86.elf 2827 hax.x86.elf 2827 hax.x86.elf 2827 hax.x86.elf 2827 hax.x86.elf 2827 hax.x86.elf 2827 hax.x86.elf 2827 hax.x86.elf 2827 hax.x86.elf 2827 hax.x86.elf 2827 hax.x86.elf 2827 hax.x86.elf 2827 hax.x86.elf 2827 hax.x86.elf 2827 hax.x86.elf 2827 hax.x86.elf 2827 hax.x86.elf 2827 hax.x86.elf 2827 hax.x86.elf 2827 hax.x86.elf 2827 hax.x86.elf 2827 hax.x86.elf 2827 hax.x86.elf