Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
5s -
platform
debian-9_mipsel -
resource
debian9-mipsel-20240611-en -
resource tags
arch:mipselimage:debian9-mipsel-20240611-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem -
submitted
20/03/2025, 03:47
Behavioral task
behavioral1
Sample
a41064e46ee4b5f322c59edd99c0496bb95086d4e681925064a9f6ab0435c331.elf
Resource
debian9-mipsel-20240611-en
General
-
Target
a41064e46ee4b5f322c59edd99c0496bb95086d4e681925064a9f6ab0435c331.elf
-
Size
108KB
-
MD5
ca9c21fac12bf6adf7a9d069f08d3826
-
SHA1
bfd18646fc1645a0dd13adbcab5b2fce47440cdb
-
SHA256
a41064e46ee4b5f322c59edd99c0496bb95086d4e681925064a9f6ab0435c331
-
SHA512
85cbd56dcbfea18c1665589ae7febbdf0577a09dede290d0a8362b19547f26838df25926afe8689c698010dd3f094ea30af500b118bf7300ab50eb779f79f8b3
-
SSDEEP
1536:ZI6yHdMxPaDMHsAQDqX10Zvp4Mmp7vx6ZHKEnmgpd410wnq:ZI6yHdSPKMH1Qe13p756w0+Zq
Malware Config
Signatures
-
Enumerates active TCP sockets 1 TTPs 1 IoCs
Gets active TCP sockets from /proc virtual filesystem.
description ioc Process File opened for reading /proc/net/tcp a41064e46ee4b5f322c59edd99c0496bb95086d4e681925064a9f6ab0435c331.elf -
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
description ioc Process File opened for reading /proc/net/tcp a41064e46ee4b5f322c59edd99c0496bb95086d4e681925064a9f6ab0435c331.elf