Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
145s -
max time network
146s -
platform
ubuntu-22.04_amd64 -
resource
ubuntu2204-amd64-20240611-en -
resource tags
arch:amd64arch:i386image:ubuntu2204-amd64-20240611-enkernel:5.15.0-105-genericlocale:en-usos:ubuntu-22.04-amd64system -
submitted
10/01/2025, 02:47
Behavioral task
behavioral1
Sample
9a9dabc7e7049bbe769862a4f3ddfc65b6ba294a048d41b95588a8a6dd68c56e.elf
Resource
ubuntu2204-amd64-20240611-en
General
-
Target
9a9dabc7e7049bbe769862a4f3ddfc65b6ba294a048d41b95588a8a6dd68c56e.elf
-
Size
89KB
-
MD5
d7612a30f87510c9dc2a7058b535e086
-
SHA1
f8e29c34a4d608a42b6ee5b0e4155c02ef4a163d
-
SHA256
9a9dabc7e7049bbe769862a4f3ddfc65b6ba294a048d41b95588a8a6dd68c56e
-
SHA512
2255ef5c6fce4040da8c897672af78b000a41be93b182ee1558ce042886831866ae07f51bfc4fbf633ba953ccdae5945dc30ef6b6edf8fcd32887e94aa10b446
-
SSDEEP
1536:oTfepUvU5S1awHRoZJfeeYI+s8LCw9HbQfzgeVJYCuAAxcW7efTcgZvYV:oToUvU52HRoZpeevbFWOUeVgxcW7ef45
Malware Config
Signatures
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
description ioc Process File opened for reading /proc/net/route 9a9dabc7e7049bbe769862a4f3ddfc65b6ba294a048d41b95588a8a6dd68c56e.elf -
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
description ioc Process File opened for reading /proc/net/route 9a9dabc7e7049bbe769862a4f3ddfc65b6ba294a048d41b95588a8a6dd68c56e.elf