Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

1

arm7.elf

debian-9-armhf

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    arm7.elf

  • Size

    109KB

  • Sample

    250328-dtntkatks8

  • MD5

    2cccc432f7b7f8bb28587af1e988f743

  • SHA1

    eedf04f9007ce8bbb156f2bdd749de6dbc7bf325

  • SHA256

    3182469b7e45ecf54dafe3536b38dbe82e2d4fc94537fdb98d61a48fac2c097f

  • SHA512

    8cb0ae2e3e0821d51acc6ecd1b392f823d11984feb4aacbd60970be683a85596240cbaacd16b33e6bcbeb026e13adb59be4dbc07e68816bcb19f859aa51d5112

  • SSDEEP

    3072:wMS4g67OOit36Y5lRon+cBIHCyJfKaEc6JPBj1MVs+mkWnl:wMS4g67OOit36+UngHJiaEc6JPBpMcX

Score
9/10
credential_accessdiscovery

Malware Config

Targets

    • Target

      arm7.elf

    • Size

      109KB

    • MD5

      2cccc432f7b7f8bb28587af1e988f743

    • SHA1

      eedf04f9007ce8bbb156f2bdd749de6dbc7bf325

    • SHA256

      3182469b7e45ecf54dafe3536b38dbe82e2d4fc94537fdb98d61a48fac2c097f

    • SHA512

      8cb0ae2e3e0821d51acc6ecd1b392f823d11984feb4aacbd60970be683a85596240cbaacd16b33e6bcbeb026e13adb59be4dbc07e68816bcb19f859aa51d5112

    • SSDEEP

      3072:wMS4g67OOit36Y5lRon+cBIHCyJfKaEc6JPBj1MVs+mkWnl:wMS4g67OOit36+UngHJiaEc6JPBpMcX

    Score
    9/10
    credential_accessdiscovery

    • Contacts a large (29819) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Renames itself

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Reads process memory

      Read the memory of a process through the /proc virtual filesystem. This can be used to steal credentials.

      credential_access
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks