Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    24702s
  • max time network
    146s
  • platform
    linux_mips
  • resource
    debian9-mipsbe-en-20211208
  • resource tags

    arch:mipsimage:debian9-mipsbe-en-20211208kernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
  • submitted
    20/09/2022, 14:46

General

  • Target

    mips-20220920-1445.elf

  • Size

    98KB

  • MD5

    06eb87e3e0271a898a647e57e0e12481

  • SHA1

    c76d81da9ea13e79a8a799dd6014cd4f2f3af511

  • SHA256

    59de6bfdd9ed67d803bc062b5f2234fa76e339833f99963e41ca744330d14005

  • SHA512

    d48a590a964721ed58c5e8dc27a3bee796700c45d809f3deb0f57e2a809227e497b59879e53351bfbe9d2edf5e8d1d31e9f59c09358d9409e4572310961f7856

  • SSDEEP

    768:L8tDHzromzMYPQ8EL89els9F1jcAYjbPIEx02rKJLo+4A3Iabx31t10W34V6k3yo:4D1YzUF1YpXWJLo+4A3IaV3+JceZtXAy

Score
7/10

Malware Config

Signatures

  • Enumerates active TCP sockets 1 TTPs 1 IoCs

    Gets active TCP sockets from /proc virtual filesystem.

  • Reads system network configuration 1 TTPs 1 IoCs

    Uses contents of /proc filesystem to enumerate network settings.

  • Reads runtime system information 22 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • /tmp/mips-20220920-1445.elf
    /tmp/mips-20220920-1445.elf
    1⤵
      PID:324
    • /bin/sh
      sh -c "rm -rf bin/systemd && mkdir bin; >bin/systemd && mv /tmp/mips-20220920-1445.elf bin/systemd; chmod 777 bin/systemd"
      1⤵
        PID:325
        • /bin/rm
          rm -rf bin/systemd
          2⤵
            PID:326
          • /bin/mkdir
            mkdir bin
            2⤵
            • Reads runtime system information
            PID:330
          • /bin/mv
            mv /tmp/mips-20220920-1445.elf bin/systemd
            2⤵
            • Reads runtime system information
            PID:331
          • /bin/chmod
            chmod 777 bin/systemd
            2⤵
              PID:332

          Network

          MITRE ATT&CK Enterprise v6

          Replay Monitor

          Loading Replay Monitor...

          Downloads