Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
148s -
max time network
149s -
platform
debian-9_mipsel -
resource
debian9-mipsel-20240418-en -
resource tags
arch:mipselimage:debian9-mipsel-20240418-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem -
submitted
19/02/2025, 04:00
Behavioral task
behavioral1
Sample
5ab6f4941c390d0c882f0ea0572c94282b6c7262ae288928d4a7461e1f87a5f2.elf
Resource
debian9-mipsel-20240418-en
General
-
Target
5ab6f4941c390d0c882f0ea0572c94282b6c7262ae288928d4a7461e1f87a5f2.elf
-
Size
123KB
-
MD5
301abf86c75d3c8e4bf26d4c0ea8aafa
-
SHA1
0e60857bf7d0a8d5eddd850042682b14aec03017
-
SHA256
5ab6f4941c390d0c882f0ea0572c94282b6c7262ae288928d4a7461e1f87a5f2
-
SHA512
9ecdfe31bc874ee7ce5c3e02844d5660d6420b4478a4ed08fbf478ffb07b6b27a9aebff57682fd10219227f9516c0c18d59f22297ec848e854e79aa4fcc5c7fa
-
SSDEEP
1536:/UHeTxCAms/Y8Zm3lKYA43gMJwSkJ8Epv+DzUh8rmW+IFB1Df11hR/:/UyLqAmgMJM8Ex+Dw8rmW+IFB1Dt1hR/
Malware Config
Signatures
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
description ioc Process File opened for reading /proc/net/route 5ab6f4941c390d0c882f0ea0572c94282b6c7262ae288928d4a7461e1f87a5f2.elf -
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
description ioc Process File opened for reading /proc/net/route 5ab6f4941c390d0c882f0ea0572c94282b6c7262ae288928d4a7461e1f87a5f2.elf