Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
151s -
max time network
154s -
platform
debian-9_armhf -
resource
debian9-armhf-20221125-en -
resource tags
arch:armhfimage:debian9-armhf-20221125-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem -
submitted
24/08/2023, 07:49
Static task
static1
Behavioral task
behavioral1
Sample
mra7.elf
Resource
debian9-armhf-20221125-en
2 signatures
150 seconds
General
-
Target
mra7.elf
-
Size
125KB
-
MD5
c1692398ddceb6cf18561ffca55935c7
-
SHA1
264398fa307d6b39a1523cbcf878050e8f401a72
-
SHA256
7225c817d70613f0ca96dec049355be2947f7306762d1f4cb2e9fc264b8cc4f9
-
SHA512
519e066dce58a3d42bcf016c57ea677e9b9f7c6501d6856414e087eef1a0bd1d8bcbb038a017661666fb0f5267ce96bb69f923ca4ca655c6b45e17413e0326a9
-
SSDEEP
3072:S5qBQ+GuaZV/5DL/FTI/+qJ0dNPafW5h0puxu:S5qBQzuaZ55DL/F8/6dNPa+5hZxu
Score
7/10
Malware Config
Signatures
-
Changes its process name 4 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself daddyl33t's back 368 mra7.elf Changes the process name, possibly in an attempt to hide itself 368 mra7.elf Changes the process name, possibly in an attempt to hide itself 372 Process not Found Changes the process name, possibly in an attempt to hide itself 371 Process not Found -
Writes DNS configuration 1 TTPs 1 IoCs
Writes data to DNS resolver config file.
description ioc File opened for modification /etc/resolv.conf