Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    24068s
  • max time network
    149s
  • platform
    linux_mips
  • resource
    debian9-mipsbe-en-20211208
  • resource tags

    arch:mipsimage:debian9-mipsbe-en-20211208kernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
  • submitted
    13/09/2022, 06:55

General

  • Target

    f81fc7600d7253cfa6594cdd1e45ee77.elf

  • Size

    151KB

  • MD5

    f81fc7600d7253cfa6594cdd1e45ee77

  • SHA1

    2fc8db45f81686382d17693b06e60c611ba12758

  • SHA256

    95d33a53bc03e42bf5cd6ff413799591a7f99bdee229105375e8d6726333f55f

  • SHA512

    1b4ddc1c5bc60bab31507bebf36139309963e31050ee3aea487d1c7efacebc2ceb9421d466730bb402d695be45d692e277247dede7c472a1d5e477f3913842df

  • SSDEEP

    3072:JW6dm9tS1aRGQdK76t/zCuI5mrThPaLEnvPrNb:c6IG+LC/mrThPaLEnvPrNb

Score
9/10

Malware Config

Signatures

  • Modifies the Watchdog daemon 1 TTPs

    Malware like Mirai modify the Watchdog to prevent it restarting an infected system.

  • Reads system routing table 1 TTPs 1 IoCs

    Gets active network interfaces from /proc virtual filesystem.

  • Reads system network configuration 1 TTPs 1 IoCs

    Uses contents of /proc filesystem to enumerate network settings.

Processes

  • /tmp/f81fc7600d7253cfa6594cdd1e45ee77.elf
    /tmp/f81fc7600d7253cfa6594cdd1e45ee77.elf
    1⤵
    • Reads system routing table
    • Reads system network configuration
    PID:320

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads