Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
5s -
platform
debian-9_armhf -
resource
debian9-armhf-20240611-en -
resource tags
-
submitted
19/03/2025, 00:18
General
-
Target
Federalarm7Agent.elf
-
Size
169KB
-
MD5
010003251dbf3b0e2a7c763a14156cbc
-
SHA1
6b7b10901095b8889892bd6ed72d5b86d4025231
-
SHA256
7576ec12c17becdef0ea3695a937e556b924d0da3ebe1f86d2bab2da6b160458
-
SHA512
606d1b249d9894a63e1a4977ce631f9264a621406eff6f88b2378a21db8204cac7717772f2ef9762492fc9618f6d7b15614fca020d239eb8ea2fadb0b46310a5
-
SSDEEP
3072:E/dxZein91duuzKdAz7aFQqblM104pR8IKcMis2XK5vM/942mAwbGphR:cdxZei911EY7aFQqblMK4vvjLXKhM/9v
Score
6/10
Malware Config
Signatures
-
Enumerates active TCP sockets 1 TTPs 1 IoCs
Gets active TCP sockets from /proc virtual filesystem.
-
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
Processes
-
/tmp/Federalarm7Agent.elf/tmp/Federalarm7Agent.elf1⤵
- Enumerates active TCP sockets
- Reads system network configuration