Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    5s
  • max time network
    145s
  • platform
    debian-12_armhf
  • resource
    debian12-armhf-20240418-en
  • resource tags

    arch:armhfimage:debian12-armhf-20240418-enkernel:6.1.0-17-armmp-lpaelocale:en-usos:debian-12-armhfsystem
  • submitted
    20/03/2025, 03:20

General

  • Target

    77c607982092d3975005f7a0dac25caab7c8ea36c74ddc2886390a7a70a338df.elf

  • Size

    162KB

  • MD5

    33fd833afc2d62a02b556a9616004af0

  • SHA1

    1e9e9be788ac04bd374f1c745c9ff157f7165d2b

  • SHA256

    77c607982092d3975005f7a0dac25caab7c8ea36c74ddc2886390a7a70a338df

  • SHA512

    94de687e938476d09f88efa1be1a5d775d9299fd37455446b6cb1acc9be9fb37d288f34de833cc49b603c039c237fcb2dc45c1abacd362fe2ffa93578e40132f

  • SSDEEP

    3072:CBF6pcUYnm+3W9aPa9pTWMFQjf3BZhSo40XsXIDsM/9slxNn2Pmqwb4XhR:Cj6pcUYm3EPa9pTWMFefdbhXsXIgM/9R

Score
6/10

Malware Config

Signatures

  • Enumerates active TCP sockets 1 TTPs 1 IoCs

    Gets active TCP sockets from /proc virtual filesystem.

  • Reads system network configuration 1 TTPs 1 IoCs

    Uses contents of /proc filesystem to enumerate network settings.

Processes

  • /tmp/77c607982092d3975005f7a0dac25caab7c8ea36c74ddc2886390a7a70a338df.elf
    /tmp/77c607982092d3975005f7a0dac25caab7c8ea36c74ddc2886390a7a70a338df.elf
    1⤵
    • Enumerates active TCP sockets
    • Reads system network configuration
    PID:705

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads