Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

7738607b44...46.elf

ubuntu-24.04-amd64

6

Analysis

  • max time kernel
    149s
  • max time network
    150s
  • platform
    ubuntu-24.04_amd64
  • resource
    ubuntu2404-amd64-20240523-en
  • resource tags

    arch:amd64arch:i386image:ubuntu2404-amd64-20240523-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system
  • submitted
    19/02/2025, 04:36

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    7738607b44b9501df5e4eb4023d63e4b5211ad8f18ab7ff2279e4e888e4c5046.elf

  • Size

    194KB

  • MD5

    5ac94efd402e550349e1fcf36ef0f407

  • SHA1

    fc0d373abe708b4f81c458f3ffcca27182199ec1

  • SHA256

    7738607b44b9501df5e4eb4023d63e4b5211ad8f18ab7ff2279e4e888e4c5046

  • SHA512

    954f0bdc125d6f582f8257925d0f0ecb0625df1ac4ae39ec9e3a8a525729fe3384afbc8060445278ab4fd25a5680675a3b8b7a74d599477c3dcc3b00e6474c58

  • SSDEEP

    3072:h1gYl3Cq7l/5irjNMG9hp/qxV5MEal2TmmXtcnSFSs67:r3WjhpizNTmmXtcnSFSs67

Score
6/10
discovery

Malware Config

Signatures

  • Reads system routing table 1 TTPs 1 IoCs

    Gets active network interfaces from /proc virtual filesystem.

    discovery
  • Changes its process name 1 IoCs
  • Reads system network configuration 1 TTPs 1 IoCs

    Uses contents of /proc filesystem to enumerate network settings.

    discovery

Processes

  • /tmp/7738607b44b9501df5e4eb4023d63e4b5211ad8f18ab7ff2279e4e888e4c5046.elf
    /tmp/7738607b44b9501df5e4eb4023d63e4b5211ad8f18ab7ff2279e4e888e4c5046.elf
    1⤵
    • Reads system routing table
    • Changes its process name
    • Reads system network configuration
    PID:2488

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads