Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    136s
  • max time network
    148s
  • platform
    ubuntu-18.04_amd64
  • resource
    ubuntu1804-amd64-20240611-en
  • resource tags

    arch:amd64arch:i386image:ubuntu1804-amd64-20240611-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
  • submitted
    22/01/2025, 16:11

General

  • Target

    krfk64.elf

  • Size

    156KB

  • MD5

    eebf4b2b2defd1f78281d591461eefdc

  • SHA1

    9bbadec29e767d24c22230ec64bc64369c21ca25

  • SHA256

    19b3668761376a902bed2ff27aac7107f14e9f76eae85f06719c25c7777c85e9

  • SHA512

    7b92b6cb0a39694a8e5221bbe7e521494e2aaa2e116a7c7868a37b332ea29c92fcbdb256b984fa85b30609d48fae4058f4a140b84c9ed4e2454d3aebe1ff0d74

  • SSDEEP

    3072:nMm4EPBMqOlPhX6qE2efpchx0XXzbD9jC4CU/ek21iZkn9rkKUb:nMm4EP6qOlPhZeywIVi7E9r9M

Score
7/10

Malware Config

Signatures

  • Deletes itself 1 IoCs
  • Traces itself 1 IoCs

    Traces itself to prevent debugging attempts

  • Changes its process name 1 IoCs
  • Writes file to tmp directory 9 IoCs

    Malware often drops required files in the /tmp directory.

Processes

  • /tmp/krfk64.elf
    /tmp/krfk64.elf
    1⤵
    • Deletes itself
    • Traces itself
    • Changes its process name
    • Writes file to tmp directory
    PID:1490

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads