Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
bf23fbc3fb2294d577d408562d061d1d.elf
-
Size
89KB
-
Sample
230821-f8allach7w
-
MD5
bf23fbc3fb2294d577d408562d061d1d
-
SHA1
ba622f06c935f9685a7cea5e456c5c3111636df0
-
SHA256
3a7739ddc9e0efc1391fabe38d8bc8ff221676628b678bba11345986d8a4f4c5
-
SHA512
07fc7769a281ba93fff0d5847d963d29391d711850fb0ebf74c80898b2cc6d5ddf4e6f526ef89ccdf4bc7ef821bdac97c6a4b3db9657edfc35e9ad970f46fb93
-
SSDEEP
1536:NYCYxrXP40ODyPwHRQ9PlzTRfyToNoZq/i:qCYxrKDy46N0
Behavioral task
behavioral1
Sample
bf23fbc3fb2294d577d408562d061d1d.elf
Resource
debian9-mipsel-20221111-en
Malware Config
Extracted
mirai
LZRD
Targets
-
-
Target
bf23fbc3fb2294d577d408562d061d1d.elf
-
Size
89KB
-
MD5
bf23fbc3fb2294d577d408562d061d1d
-
SHA1
ba622f06c935f9685a7cea5e456c5c3111636df0
-
SHA256
3a7739ddc9e0efc1391fabe38d8bc8ff221676628b678bba11345986d8a4f4c5
-
SHA512
07fc7769a281ba93fff0d5847d963d29391d711850fb0ebf74c80898b2cc6d5ddf4e6f526ef89ccdf4bc7ef821bdac97c6a4b3db9657edfc35e9ad970f46fb93
-
SSDEEP
1536:NYCYxrXP40ODyPwHRQ9PlzTRfyToNoZq/i:qCYxrKDy46N0
Score9/10-
Contacts a large (20333) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Enumerates active TCP sockets
Gets active TCP sockets from /proc virtual filesystem.
-