Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
149s -
max time network
152s -
platform
debian-12_armhf -
resource
debian12-armhf-20240221-en -
resource tags
arch:armhfimage:debian12-armhf-20240221-enkernel:6.1.0-17-armmp-lpaelocale:en-usos:debian-12-armhfsystem -
submitted
03/02/2025, 20:47
Behavioral task
behavioral1
Sample
main_arm7.elf
Resource
debian12-armhf-20240221-en
4 signatures
150 seconds
General
-
Target
main_arm7.elf
-
Size
177KB
-
MD5
ce8f7b7fa7439215ffa7867af7575ccc
-
SHA1
fb278594c6d48cb6d51ee7c1b616d206b4e1c848
-
SHA256
27d11ab9458ce1c255ad83128518acd08a566a0579d91b44124645f27424aa25
-
SHA512
3391699424386efd31c18f6991f21ea12bf01b2ea98307b716fceb4b9ef5edaf0eaddd90fae5033b798c00443d65eb3533ccd90c47ba4d666865c5f574c36e17
-
SSDEEP
3072:OzeSvtfp84oALv2eEQakGzORuGMzw99Lld38YhTfYo+M/RM+FDhdLn:2eSvJZoA7TEQakGzORuBGLld38+x+M/z
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
pid Process 709 main_arm7.elf -
Traces itself 2 IoCs
Traces itself to prevent debugging attempts
pid Process 709 main_arm7.elf 712 main_arm7.elf -
Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself httpd 709 main_arm7.elf -
Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
description ioc Process File opened for modification /tmp/main_arm7.elf main_arm7.elf