Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    bimbo-x86.elf

  • Size

    41KB

  • Sample

    250328-gpa9fsvjs5

  • MD5

    2bf5bd1011bb9e538cade75d148d9aa5

  • SHA1

    014886edf412f4a790a08aaf18cc4522a5935d8d

  • SHA256

    f975c4c55a4238ef389bf2f9b3c4ef6b0ae5e7feb078522b47024f12dc5c9384

  • SHA512

    62937c590496ff92ff2bba78c1f25e560bdfc8d714d186daa6967fccb2ce1e4c7e446c6b6b0f608fb6ac389f03c60d5612726fe5b15d47fe6d31a18168066ada

  • SSDEEP

    768:grSZQGftR0rfpuoPjArT5l5beVykNCvxyx+/Hw+6RKd2JaU0gUQ2PNRQ:grSZhftuUlaVyYCK+6RK0JaU0XQ2PP

Malware Config

Targets

    • Target

      bimbo-x86.elf

    • Size

      41KB

    • MD5

      2bf5bd1011bb9e538cade75d148d9aa5

    • SHA1

      014886edf412f4a790a08aaf18cc4522a5935d8d

    • SHA256

      f975c4c55a4238ef389bf2f9b3c4ef6b0ae5e7feb078522b47024f12dc5c9384

    • SHA512

      62937c590496ff92ff2bba78c1f25e560bdfc8d714d186daa6967fccb2ce1e4c7e446c6b6b0f608fb6ac389f03c60d5612726fe5b15d47fe6d31a18168066ada

    • SSDEEP

      768:grSZQGftR0rfpuoPjArT5l5beVykNCvxyx+/Hw+6RKd2JaU0gUQ2PNRQ:grSZhftuUlaVyYCK+6RK0JaU0XQ2PP

    • Contacts a large (429718) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Reads process memory

      Read the memory of a process through the /proc virtual filesystem. This can be used to steal credentials.

MITRE ATT&CK Enterprise v15

Tasks