Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
119s -
max time network
153s -
platform
debian-12_armhf -
resource
debian12-armhf-20240221-en -
resource tags
arch:armhfimage:debian12-armhf-20240221-enkernel:6.1.0-17-armmp-lpaelocale:en-usos:debian-12-armhfsystem -
submitted
31/12/2024, 02:39
Behavioral task
behavioral1
Sample
885698463e78565582660b7410cf5621443a3776731218e84a0cd6c10c74b876.elf
Resource
debian12-armhf-20240221-en
General
-
Target
885698463e78565582660b7410cf5621443a3776731218e84a0cd6c10c74b876.elf
-
Size
146KB
-
MD5
8e22094f18a17915d119aa319542378f
-
SHA1
8523bd764861f593698ae843cd77bb8c52a0f27c
-
SHA256
885698463e78565582660b7410cf5621443a3776731218e84a0cd6c10c74b876
-
SHA512
8bc8147ac74ecc91e05d767f0f78e791d2c43523b8922dabaa2b7965e31b42b5485e890a356153c4c805bf1d4a9915b72423b557f23df4ab608eaaf0860d5b58
-
SSDEEP
3072:ut8iFDKEfFN+Fa+1sW5h7a8oXV7pUMbmQwfCMQiGW:s8iFDLf/+FaN0h7a8oXV7p5mQwfCDiGW
Malware Config
Signatures
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
description ioc Process File opened for reading /proc/net/route 885698463e78565582660b7410cf5621443a3776731218e84a0cd6c10c74b876.elf -
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
description ioc Process File opened for reading /proc/net/route 885698463e78565582660b7410cf5621443a3776731218e84a0cd6c10c74b876.elf