Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

cb74de70fe...37.elf

ubuntu-22.04-amd64

6

Analysis

  • max time kernel
    5s
  • max time network
    131s
  • platform
    ubuntu-22.04_amd64
  • resource
    ubuntu2204-amd64-20250307-en
  • resource tags

    arch:amd64arch:i386image:ubuntu2204-amd64-20250307-enkernel:5.15.0-105-genericlocale:en-usos:ubuntu-22.04-amd64system
  • submitted
    20/03/2025, 04:13

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    cb74de70fed42a5c09b3134fd795774fc799f71f7f603f752224eeadb5b42537.elf

  • Size

    81KB

  • MD5

    022ef84c697951a38f9e74307459a16b

  • SHA1

    cc6f42e865d5b8bd40b25bfa72f233697250e047

  • SHA256

    cb74de70fed42a5c09b3134fd795774fc799f71f7f603f752224eeadb5b42537

  • SHA512

    69bb73e6bba31b57561e84e5ab8f29aa0c832ff90ed945e2ac06ee625818c57808e50d416efd9b24e03de7dc977db3570148749ba20c231bdde1a0697edf68df

  • SSDEEP

    1536:jrXYZa2SzTVTTm0qTCIRch6/lH4qkMINJWDJwxvK0z08QIX6LqOf:nYZMzRTHqTCqMaIJ4wxQ8QIXcqO

Score
6/10
discovery

Malware Config

Signatures

  • Enumerates active TCP sockets 1 TTPs 1 IoCs

    Gets active TCP sockets from /proc virtual filesystem.

    discovery
  • Reads system network configuration 1 TTPs 1 IoCs

    Uses contents of /proc filesystem to enumerate network settings.

    discovery

Processes

  • /tmp/cb74de70fed42a5c09b3134fd795774fc799f71f7f603f752224eeadb5b42537.elf
    /tmp/cb74de70fed42a5c09b3134fd795774fc799f71f7f603f752224eeadb5b42537.elf
    1⤵
    • Enumerates active TCP sockets
    • Reads system network configuration
    PID:1564

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads