Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

bimbo-arm.elf

debian-9-armhf

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bimbo-arm.elf

  • Size

    45KB

  • Sample

    250328-gpa9fsvjs3

  • MD5

    81275f6284e64e709a3557638ecdf928

  • SHA1

    8e8e32f530e2949b00a21352e81b8c7682329d8e

  • SHA256

    f5b488f0e2bae1878cd48722fc14fbdf449cf388f03db8cbc0576a63fdaab4db

  • SHA512

    3462281c5f4f072fa6847cca28d8fb2d0c52f38625f21ab5e132fae02f186749b36e666a9667c5e0be766bb8b1602dd34d1f4aec135a78b34ae5e99ee74ab10c

  • SSDEEP

    768:xe1qjL8uelWFB1jvm+tbPrY6e3CiuX3P+gv4Smb7vOiLmqU32FP3FYYVgl0LABo7:cqkuB1S+tbLeSTX/HQ/mqUyfFGOAO

Score
10/10
miraicredential_accessdiscovery

Malware Config

Targets

    • Target

      bimbo-arm.elf

    • Size

      45KB

    • MD5

      81275f6284e64e709a3557638ecdf928

    • SHA1

      8e8e32f530e2949b00a21352e81b8c7682329d8e

    • SHA256

      f5b488f0e2bae1878cd48722fc14fbdf449cf388f03db8cbc0576a63fdaab4db

    • SHA512

      3462281c5f4f072fa6847cca28d8fb2d0c52f38625f21ab5e132fae02f186749b36e666a9667c5e0be766bb8b1602dd34d1f4aec135a78b34ae5e99ee74ab10c

    • SSDEEP

      768:xe1qjL8uelWFB1jvm+tbPrY6e3CiuX3P+gv4Smb7vOiLmqU32FP3FYYVgl0LABo7:cqkuB1S+tbLeSTX/HQ/mqUyfFGOAO

    Score
    9/10
    credential_accessdiscovery

    • Contacts a large (422905) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Reads process memory

      Read the memory of a process through the /proc virtual filesystem. This can be used to steal credentials.

      credential_access
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks