Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    32608s
  • max time network
    124s
  • platform
    linux_mips
  • resource
    debian9-mipsbe-en-20211208
  • resource tags

    arch:mipsimage:debian9-mipsbe-en-20211208kernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
  • submitted
    21/12/2022, 02:57

General

  • Target

    3e5ea611c546f5777fdd727ca3b17423.elf

  • Size

    386KB

  • MD5

    3e5ea611c546f5777fdd727ca3b17423

  • SHA1

    6e9c06bd59693fca79d743f64b718505527ce01b

  • SHA256

    0bb4dce69365ae39f2477b04ec5156dbff08c8ef3e11350bc7dbd3f61bae904d

  • SHA512

    89f57182d748bddfdf32b2ac72ca9817e6047ee4c656e041e12c4e52a1c15aa49f9d045c975de663d3bb021123f94c78948a62b01da47904aec69042ca40abbd

  • SSDEEP

    6144:tRH+4s+F4xh2ewR83PyOGyTc+vWkekvaJu81Vn6A914/tT30D:E9NCsP+wDvaJu81Vn6A914/tT30D

Score
9/10

Malware Config

Signatures

  • Modifies the Watchdog daemon 1 TTPs

    Malware like Mirai modify the Watchdog to prevent it restarting an infected system.

  • Writes file to system bin folder 1 TTPs 1 IoCs
  • Modifies rc script 1 TTPs 1 IoCs

    Adding/modifying system rc scripts is a common persistence mechanism.

  • Reads runtime system information 64 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • /tmp/3e5ea611c546f5777fdd727ca3b17423.elf
    /tmp/3e5ea611c546f5777fdd727ca3b17423.elf
    1⤵
    • Reads runtime system information
    PID:325

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads