Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
5s -
platform
debian-9_armhf -
resource
debian9-armhf-20240729-en -
resource tags
-
submitted
28/12/2024, 02:07 UTC
General
-
Target
1c3cbb053407cdddd7e476757271fd7069fd020934cd75e623581ff18060113f.elf
-
Size
132KB
-
MD5
63559d2751b8fa7972e8bb3c0f583075
-
SHA1
c65d17a31fd5520780d0341e2304c273c88bac4f
-
SHA256
1c3cbb053407cdddd7e476757271fd7069fd020934cd75e623581ff18060113f
-
SHA512
11a15a7a11c0029d20f86108fc65379f1725997fe6bdc2e3832d281bb51eace128cac98cf6ea942841d999eebc2bc4992e00ca37e97230a66c1c402669ad7a8e
-
SSDEEP
3072:BxioDMQI5nrwaO4nt3qZg2IWu6b4JX7LkDM/98PmPw/t93:DioDtI5rnnt3qZgPWjWX74DM/9smPw/f
Score
6/10
Malware Config
Signatures
-
Enumerates active TCP sockets 1 TTPs 1 IoCs
Gets active TCP sockets from /proc virtual filesystem.
-
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
Processes
-
/tmp/1c3cbb053407cdddd7e476757271fd7069fd020934cd75e623581ff18060113f.elf/tmp/1c3cbb053407cdddd7e476757271fd7069fd020934cd75e623581ff18060113f.elf1⤵
- Enumerates active TCP sockets
- Reads system network configuration