Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    149s
  • max time network
    153s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20240611-en
  • resource tags

    arch:armhfimage:debian9-armhf-20240611-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    01/02/2025, 20:52

General

  • Target

    185.224.0.242-bot.arm5-2025-02-01T192102.elf

  • Size

    126KB

  • MD5

    32c9aad816f35f0a9df8922264a6d508

  • SHA1

    38096117bf3a7f28b5625f47c63316fca39ba132

  • SHA256

    7c4169afb95dbf9379c0230e1360f6ec398b6e05c62c1f650581b3af3de55a93

  • SHA512

    8ac3da86459195852a6200bbfc4dcda971dc2221585810d19252512a4b05d55c75d69324657d4f38561f1c2946b656be3215eabd8a61189874f3741961d2ec0d

  • SSDEEP

    1536:JUvvsE3G5qB/RpR83QYY1XANIK4V02RTV5xTpyHvx6jpChDDclcywyw8FLRXt4Ny:ivvTQORXZ1X44DRR5xTpyJkpCJcBb3

Score
6/10

Malware Config

Signatures

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Changes its process name 1 IoCs
  • Reads runtime system information 64 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • /tmp/185.224.0.242-bot.arm5-2025-02-01T192102.elf
    /tmp/185.224.0.242-bot.arm5-2025-02-01T192102.elf
    1⤵
    • Changes its process name
    • Reads runtime system information
    PID:655

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads