Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    105s
  • max time network
    116s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20240611-en
  • resource tags

    arch:armhfimage:debian9-armhf-20240611-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    19/02/2025, 02:29

General

  • Target

    12d1c088b1ab362a3469ef57c595247ad59f05187c0c5c0137eba913dc490fe2.elf

  • Size

    117KB

  • MD5

    5fde5dc82bcb4337a9452b7603883cbd

  • SHA1

    b783a02f7d5187371360d572ccfc50988be8b8e1

  • SHA256

    12d1c088b1ab362a3469ef57c595247ad59f05187c0c5c0137eba913dc490fe2

  • SHA512

    bc412ad0ddd185c83a4458f23e8433f86fcc10b2beb4f269551d1939a35fcee1e04df1c92e29105d2649831123d5682ea2f6c8687e949931102b5e02a066b60f

  • SSDEEP

    3072:BJDZ+6lJQTnoo3aKy3kVnxT2vo7ouXCZXhYeoC9DQlD6ObAF5R:lkVxiw7ou0XoC9DQlD6ObAF5R

Score
7/10

Malware Config

Signatures

  • Writes DNS configuration 1 TTPs 1 IoCs

    Writes data to DNS resolver config file.

  • Changes its process name 1 IoCs

Processes

  • /tmp/12d1c088b1ab362a3469ef57c595247ad59f05187c0c5c0137eba913dc490fe2.elf
    /tmp/12d1c088b1ab362a3469ef57c595247ad59f05187c0c5c0137eba913dc490fe2.elf
    1⤵
    • Writes DNS configuration
    • Changes its process name
    PID:652

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads