Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
151s -
max time network
154s -
platform
debian-9_mipsel -
resource
debian9-mipsel-20231215-en -
resource tags
arch:mipselimage:debian9-mipsel-20231215-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem -
submitted
19/12/2023, 22:33
Behavioral task
behavioral1
Sample
1357c9b4e6e780cd2e2feb8cf330c5b5
Resource
debian9-mipsel-20231215-en
General
-
Target
1357c9b4e6e780cd2e2feb8cf330c5b5
-
Size
57KB
-
MD5
1357c9b4e6e780cd2e2feb8cf330c5b5
-
SHA1
63b4aecba50c635534c34a56412ab9ea721f70f5
-
SHA256
418ffc60d83fb2b4633bf478e0b894d070f02037a635e5288897cbe636f52db2
-
SHA512
a7b568c78c96f535d199e8d426252bd117a2b500ab4e438b9c6304b1068bfc40828bf852f6167b5f9c2d429c1202e3fee13c4d50de6653c22267171429aa0b92
-
SSDEEP
768:x8vnlClB7npfad/tI4kmOGOmM8TaBere2SesbL3WFXiJ4u6mBqR:x8vn8evwGPSfbLGU6lR
Malware Config
Signatures
-
Contacts a large (112841) amount of remote hosts 1 TTPs
This may indicate a network scan to discover remotely running services.
-
Creates a large amount of network flows 1 TTPs
This may indicate a network scan to discover remotely running services.
-
Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself a 712 1357c9b4e6e780cd2e2feb8cf330c5b5 -
Modifies Watchdog functionality 1 TTPs 2 IoCs
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
description ioc File opened for modification /dev/watchdog File opened for modification /dev/misc/watchdog -
Writes file to system bin folder 1 TTPs 2 IoCs
description ioc File opened for modification /sbin/watchdog File opened for modification /bin/watchdog