Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
5s -
max time network
128s -
platform
ubuntu-22.04_amd64 -
resource
ubuntu2204-amd64-20250307-en -
resource tags
arch:amd64arch:i386image:ubuntu2204-amd64-20250307-enkernel:5.15.0-105-genericlocale:en-usos:ubuntu-22.04-amd64system -
submitted
20/03/2025, 02:52
Behavioral task
behavioral1
Sample
4b35f24379cb8f609e8d7a9dac81baef6b9d535ac940eef21892e7a533b51bcd.elf
Resource
ubuntu2204-amd64-20250307-en
General
-
Target
4b35f24379cb8f609e8d7a9dac81baef6b9d535ac940eef21892e7a533b51bcd.elf
-
Size
77KB
-
MD5
5696c53bb71c49f06011f032a20ec8ca
-
SHA1
3ff8200c733255f3718d82717c55856cfff62c52
-
SHA256
4b35f24379cb8f609e8d7a9dac81baef6b9d535ac940eef21892e7a533b51bcd
-
SHA512
48ae92238f0f32933ed2a43965d7dad9037f6a5c4abb33941aa36ac6ef06bb02f3fc2f8bcc298193f38d0355cae3670bdbfeb4425b4db99203b56cc1bcde76ac
-
SSDEEP
1536:skY55Ui+o23TyttnkKasYmdhVyuiZocGJGfbfAugG0sUDK1I4gpgnL4wpHM:ZY3SL3Ctnkj41ynKJOfAJwEKK4gpgL4H
Malware Config
Signatures
-
Enumerates active TCP sockets 1 TTPs 1 IoCs
Gets active TCP sockets from /proc virtual filesystem.
description ioc Process File opened for reading /proc/net/tcp 4b35f24379cb8f609e8d7a9dac81baef6b9d535ac940eef21892e7a533b51bcd.elf -
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
description ioc Process File opened for reading /proc/net/tcp 4b35f24379cb8f609e8d7a9dac81baef6b9d535ac940eef21892e7a533b51bcd.elf