Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
131s -
max time network
150s -
platform
debian-9_armhf -
resource
debian9-armhf-20240611-en -
resource tags
arch:armhfimage:debian9-armhf-20240611-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem -
submitted
11/03/2025, 15:07
Behavioral task
behavioral1
Sample
hide.arm.elf
Resource
debian9-armhf-20240611-en
3 signatures
150 seconds
General
-
Target
hide.arm.elf
-
Size
45KB
-
MD5
f4e047c03793ca583795d692e766c9a6
-
SHA1
82a7607567422ba14ec3ad3c5c31954443a67842
-
SHA256
9a4853a2ff7be9ccfd8cf5e0dda6ff50f318a6f081f905c7791ad8bd70774dd5
-
SHA512
b05b9afcce43bf7af5953c8a73a7c2ed1becb2ced351ba01e0a3f267b6179ddd45d21d279374e8eff0d8a843df2b29dbbbd1faee55bfe98eed18c1480a66682a
-
SSDEEP
768:CDVUcluS3gRY6UcOC3ty6dEQbdL/X+PG4gO7k/Fn2LDTEZGRLqew:EluS03/OCVhBf+PG4g2InmPl58
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
pid Process 668 hide.arm.elf -
Renames itself 1 IoCs
pid Process 668 hide.arm.elf -
Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself a 668 hide.arm.elf