Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
150s -
max time network
152s -
platform
debian-12_armhf -
resource
debian12-armhf-20240221-en -
resource tags
arch:armhfimage:debian12-armhf-20240221-enkernel:6.1.0-17-armmp-lpaelocale:en-usos:debian-12-armhfsystem -
submitted
09/01/2025, 07:12
Behavioral task
behavioral1
Sample
ssd.elf
Resource
debian12-armhf-20240221-en
2 signatures
150 seconds
General
-
Target
ssd.elf
-
Size
170KB
-
MD5
f1e8ee3a8f363f3f3b28fc7bb3bb04c4
-
SHA1
1878e2bcf186554dddc7829f443d4220bf8327fb
-
SHA256
ecd66e5a942f3296d708e83e68e066dbb496814f8b1177c5a49318c7e0b5a662
-
SHA512
d94e2942c02027382d888e04682d82c805eef695c80a8a318c3e7fc40f13315889fa6825a9f9ce6f7002ca94a051cd0c7989904663730985975b3c80844016f6
-
SSDEEP
3072:AC3BygHRaZ7DqwyLVtwZMoUrOfeSdcCtbxXG8mmoQSmKvgp4:AayeRal4LVAMo4OfeCcCDXG8mmoQSmkl
Score
6/10
Malware Config
Signatures
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
description ioc Process File opened for reading /proc/net/route ssd.elf -
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
description ioc Process File opened for reading /proc/net/route ssd.elf