Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

96246a2776...03.elf

debian-9-armhf

6

Analysis

  • max time kernel
    149s
  • max time network
    155s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20240611-en
  • resource tags

    arch:armhfimage:debian9-armhf-20240611-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    27/12/2024, 02:30

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    96246a2776def4733fda0ae3cff2df98d0c4a9a27bbda1df3d4451b8c925c803.elf

  • Size

    150KB

  • MD5

    65072f4e0786a6f75dc96d8b90cd0d6c

  • SHA1

    f0b1133c3e201193e13f4b6b182c2cfcb8f5ba97

  • SHA256

    96246a2776def4733fda0ae3cff2df98d0c4a9a27bbda1df3d4451b8c925c803

  • SHA512

    7adeee93589e774c1f3e689585adb790e5ad241c2dbe148233b84481c383542241e0b0696ea52980b305d3f5806ef9204e613fb968ce17130d4049a045886262

  • SSDEEP

    3072:Tdbmn8aAEHqgSkano1DTAM5hWTGU2WV7lxXmpwTsL/QMyn:he8aAEHKkdDT15hWTGU2WV7ldmpwTsLS

Score
6/10
discovery

Malware Config

Signatures

  • Reads system routing table 1 TTPs 1 IoCs

    Gets active network interfaces from /proc virtual filesystem.

    discovery
  • Reads system network configuration 1 TTPs 1 IoCs

    Uses contents of /proc filesystem to enumerate network settings.

    discovery

Processes

  • /tmp/96246a2776def4733fda0ae3cff2df98d0c4a9a27bbda1df3d4451b8c925c803.elf
    /tmp/96246a2776def4733fda0ae3cff2df98d0c4a9a27bbda1df3d4451b8c925c803.elf
    1⤵
    • Reads system routing table
    • Reads system network configuration
    PID:641

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads