Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    5s
  • max time network
    128s
  • platform
    ubuntu-22.04_amd64
  • resource
    ubuntu2204-amd64-20250307-en
  • resource tags

    arch:amd64arch:i386image:ubuntu2204-amd64-20250307-enkernel:5.15.0-105-genericlocale:en-usos:ubuntu-22.04-amd64system
  • submitted
    20/03/2025, 03:00

General

  • Target

    4b35f24379cb8f609e8d7a9dac81baef6b9d535ac940eef21892e7a533b51bcd.elf

  • Size

    77KB

  • MD5

    5696c53bb71c49f06011f032a20ec8ca

  • SHA1

    3ff8200c733255f3718d82717c55856cfff62c52

  • SHA256

    4b35f24379cb8f609e8d7a9dac81baef6b9d535ac940eef21892e7a533b51bcd

  • SHA512

    48ae92238f0f32933ed2a43965d7dad9037f6a5c4abb33941aa36ac6ef06bb02f3fc2f8bcc298193f38d0355cae3670bdbfeb4425b4db99203b56cc1bcde76ac

  • SSDEEP

    1536:skY55Ui+o23TyttnkKasYmdhVyuiZocGJGfbfAugG0sUDK1I4gpgnL4wpHM:ZY3SL3Ctnkj41ynKJOfAJwEKK4gpgL4H

Score
6/10

Malware Config

Signatures

  • Enumerates active TCP sockets 1 TTPs 1 IoCs

    Gets active TCP sockets from /proc virtual filesystem.

  • Reads system network configuration 1 TTPs 1 IoCs

    Uses contents of /proc filesystem to enumerate network settings.

Processes

  • /tmp/4b35f24379cb8f609e8d7a9dac81baef6b9d535ac940eef21892e7a533b51bcd.elf
    /tmp/4b35f24379cb8f609e8d7a9dac81baef6b9d535ac940eef21892e7a533b51bcd.elf
    1⤵
    • Enumerates active TCP sockets
    • Reads system network configuration
    PID:1570

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads