Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
24068s -
max time network
149s -
platform
linux_mips -
resource
debian9-mipsbe-en-20211208 -
resource tags
arch:mipsimage:debian9-mipsbe-en-20211208kernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem -
submitted
13/09/2022, 06:55
Behavioral task
behavioral1
Sample
f81fc7600d7253cfa6594cdd1e45ee77.elf
Resource
debian9-mipsbe-en-20211208
General
-
Target
f81fc7600d7253cfa6594cdd1e45ee77.elf
-
Size
151KB
-
MD5
f81fc7600d7253cfa6594cdd1e45ee77
-
SHA1
2fc8db45f81686382d17693b06e60c611ba12758
-
SHA256
95d33a53bc03e42bf5cd6ff413799591a7f99bdee229105375e8d6726333f55f
-
SHA512
1b4ddc1c5bc60bab31507bebf36139309963e31050ee3aea487d1c7efacebc2ceb9421d466730bb402d695be45d692e277247dede7c472a1d5e477f3913842df
-
SSDEEP
3072:JW6dm9tS1aRGQdK76t/zCuI5mrThPaLEnvPrNb:c6IG+LC/mrThPaLEnvPrNb
Malware Config
Signatures
-
Modifies the Watchdog daemon 1 TTPs
Malware like Mirai modify the Watchdog to prevent it restarting an infected system.
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
description ioc Process /proc/net/route /proc/net/route f81fc7600d7253cfa6594cdd1e45ee77.elf -
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
description ioc Process /proc/net/route /proc/net/route f81fc7600d7253cfa6594cdd1e45ee77.elf