Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    5s
  • platform
    debian-9_mipsel
  • resource
    debian9-mipsel-20240611-en
  • resource tags

    arch:mipselimage:debian9-mipsel-20240611-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem
  • submitted
    20/03/2025, 03:47

General

  • Target

    a41064e46ee4b5f322c59edd99c0496bb95086d4e681925064a9f6ab0435c331.elf

  • Size

    108KB

  • MD5

    ca9c21fac12bf6adf7a9d069f08d3826

  • SHA1

    bfd18646fc1645a0dd13adbcab5b2fce47440cdb

  • SHA256

    a41064e46ee4b5f322c59edd99c0496bb95086d4e681925064a9f6ab0435c331

  • SHA512

    85cbd56dcbfea18c1665589ae7febbdf0577a09dede290d0a8362b19547f26838df25926afe8689c698010dd3f094ea30af500b118bf7300ab50eb779f79f8b3

  • SSDEEP

    1536:ZI6yHdMxPaDMHsAQDqX10Zvp4Mmp7vx6ZHKEnmgpd410wnq:ZI6yHdSPKMH1Qe13p756w0+Zq

Score
6/10

Malware Config

Signatures

  • Enumerates active TCP sockets 1 TTPs 1 IoCs

    Gets active TCP sockets from /proc virtual filesystem.

  • Reads system network configuration 1 TTPs 1 IoCs

    Uses contents of /proc filesystem to enumerate network settings.

Processes

  • /tmp/a41064e46ee4b5f322c59edd99c0496bb95086d4e681925064a9f6ab0435c331.elf
    /tmp/a41064e46ee4b5f322c59edd99c0496bb95086d4e681925064a9f6ab0435c331.elf
    1⤵
    • Enumerates active TCP sockets
    • Reads system network configuration
    PID:686

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads