Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
105s -
max time network
116s -
platform
debian-9_armhf -
resource
debian9-armhf-20240611-en -
resource tags
arch:armhfimage:debian9-armhf-20240611-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem -
submitted
19/02/2025, 02:29
Behavioral task
behavioral1
Sample
12d1c088b1ab362a3469ef57c595247ad59f05187c0c5c0137eba913dc490fe2.elf
Resource
debian9-armhf-20240611-en
2 signatures
150 seconds
General
-
Target
12d1c088b1ab362a3469ef57c595247ad59f05187c0c5c0137eba913dc490fe2.elf
-
Size
117KB
-
MD5
5fde5dc82bcb4337a9452b7603883cbd
-
SHA1
b783a02f7d5187371360d572ccfc50988be8b8e1
-
SHA256
12d1c088b1ab362a3469ef57c595247ad59f05187c0c5c0137eba913dc490fe2
-
SHA512
bc412ad0ddd185c83a4458f23e8433f86fcc10b2beb4f269551d1939a35fcee1e04df1c92e29105d2649831123d5682ea2f6c8687e949931102b5e02a066b60f
-
SSDEEP
3072:BJDZ+6lJQTnoo3aKy3kVnxT2vo7ouXCZXhYeoC9DQlD6ObAF5R:lkVxiw7ou0XoC9DQlD6ObAF5R
Score
7/10
Malware Config
Signatures
-
Writes DNS configuration 1 TTPs 1 IoCs
Writes data to DNS resolver config file.
description ioc Process File opened for modification /etc/resolv.conf 12d1c088b1ab362a3469ef57c595247ad59f05187c0c5c0137eba913dc490fe2.elf -
Changes its process name 1 IoCs
description pid Process Changes the process name, possibly in an attempt to hide itself 652 12d1c088b1ab362a3469ef57c595247ad59f05187c0c5c0137eba913dc490fe2.elf