Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
138s -
max time network
152s -
platform
ubuntu-18.04_amd64 -
resource
ubuntu1804-amd64-20240611-en -
resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20240611-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system -
submitted
06/03/2025, 05:14
Behavioral task
behavioral1
Sample
ca858d47f348e68a8ef7f562e6942a14822e4d014e131b103f10ad3dd87adc2c.elf
Resource
ubuntu1804-amd64-20240611-en
2 signatures
150 seconds
General
-
Target
ca858d47f348e68a8ef7f562e6942a14822e4d014e131b103f10ad3dd87adc2c.elf
-
Size
102KB
-
MD5
cb6cbec917fc2ebcf2ac8c6fda57235d
-
SHA1
c7e4c19b8930d1ddb43d3ba9e36259abf8bc1e16
-
SHA256
ca858d47f348e68a8ef7f562e6942a14822e4d014e131b103f10ad3dd87adc2c
-
SHA512
035c899aa33b1eee55038ce75f05dd62888b3edcdcf311977b8cc70cd81426c606e243798a49c35e9346a6d5b2fa92e25af632bceb7f7c60117eea62f1e4f59d
-
SSDEEP
3072:20+z7UIRZs33Krvqozl13m0A6DdJvMr5C8:l+z7d7snKrvqozl0mtQ5D
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
pid 1481 -
Changes its process name 1 IoCs
description ioc pid Changes the process name, possibly in an attempt to hide itself httpd 1480