Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    148s
  • max time network
    149s
  • platform
    debian-9_mipsel
  • resource
    debian9-mipsel-20240418-en
  • resource tags

    arch:mipselimage:debian9-mipsel-20240418-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem
  • submitted
    19/02/2025, 04:00

General

  • Target

    5ab6f4941c390d0c882f0ea0572c94282b6c7262ae288928d4a7461e1f87a5f2.elf

  • Size

    123KB

  • MD5

    301abf86c75d3c8e4bf26d4c0ea8aafa

  • SHA1

    0e60857bf7d0a8d5eddd850042682b14aec03017

  • SHA256

    5ab6f4941c390d0c882f0ea0572c94282b6c7262ae288928d4a7461e1f87a5f2

  • SHA512

    9ecdfe31bc874ee7ce5c3e02844d5660d6420b4478a4ed08fbf478ffb07b6b27a9aebff57682fd10219227f9516c0c18d59f22297ec848e854e79aa4fcc5c7fa

  • SSDEEP

    1536:/UHeTxCAms/Y8Zm3lKYA43gMJwSkJ8Epv+DzUh8rmW+IFB1Df11hR/:/UyLqAmgMJM8Ex+Dw8rmW+IFB1Dt1hR/

Score
6/10

Malware Config

Signatures

  • Reads system routing table 1 TTPs 1 IoCs

    Gets active network interfaces from /proc virtual filesystem.

  • Reads system network configuration 1 TTPs 1 IoCs

    Uses contents of /proc filesystem to enumerate network settings.

Processes

  • /tmp/5ab6f4941c390d0c882f0ea0572c94282b6c7262ae288928d4a7461e1f87a5f2.elf
    /tmp/5ab6f4941c390d0c882f0ea0572c94282b6c7262ae288928d4a7461e1f87a5f2.elf
    1⤵
    • Reads system routing table
    • Reads system network configuration
    PID:705

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads