Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

d5cb816273...33.elf

ubuntu-18.04-amd64

9

Analysis

  • max time kernel
    0s
  • max time network
    8s
  • platform
    ubuntu-18.04_amd64
  • resource
    ubuntu1804-amd64-20221111-en
  • resource tags

    arch:amd64arch:i386image:ubuntu1804-amd64-20221111-enkernel:4.15.0-161-genericlocale:en-usos:ubuntu-18.04-amd64system
  • submitted
    19/12/2022, 08:00

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    d5cb8162730a4b0b86a024aa5da3e833.elf

  • Size

    22KB

  • MD5

    d5cb8162730a4b0b86a024aa5da3e833

  • SHA1

    722a56131d96c11cb853255b5e1e0a0a550a4b5a

  • SHA256

    90a0c711fd19306591cfb45175cd39a03632b7c077af44316bfafa74cae85643

  • SHA512

    990bc80507f63801fc370339e7cee5ba426011d1132854dde753f09a08c9a0080aadccd08295f68c0512005fb67b2b9227690fe5ade07c723f47c0165020dab9

  • SSDEEP

    384:jDYC95A2rM7RjFrvX2V6H2XJ8LaHYsbX1chwCZM4/adXWHGg+FEsPl6JjK5ep7US:jDZ5Dw7RjFjcU+O24sDeZMSaNWmlFEsk

Score
9/10

Malware Config

Signatures

  • Modifies the Watchdog daemon 1 TTPs

    Malware like Mirai modify the Watchdog to prevent it restarting an infected system.

  • Writes file to system bin folder 1 TTPs 2 IoCs
  • Reads runtime system information 10 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • /tmp/d5cb8162730a4b0b86a024aa5da3e833.elf
    /tmp/d5cb8162730a4b0b86a024aa5da3e833.elf
    1⤵
      PID:613

    Network

    MITRE ATT&CK Enterprise v6

    Replay Monitor

    Loading Replay Monitor...

    Downloads