Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
151s -
max time network
153s -
platform
debian-9_armhf -
resource
debian9-armhf-20231215-en -
resource tags
arch:armhfimage:debian9-armhf-20231215-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem -
submitted
19/12/2023, 23:28
Behavioral task
behavioral1
Sample
6784c4fed3847b864eda8bef2ebe49b3
Resource
debian9-armhf-20231215-en
General
-
Target
6784c4fed3847b864eda8bef2ebe49b3
-
Size
32KB
-
MD5
6784c4fed3847b864eda8bef2ebe49b3
-
SHA1
f0052295057f75d43dc48b4f1f7ae4f49a95ce73
-
SHA256
86c6745ba9d80b92842d28eb03b46d5fae0e58a94528ba5b24b0501a3fdee14a
-
SHA512
b2e51a55a71c35ed18663954eb951fec7c59062bea6e21b22173a4a15b79a7367c95cdd300ec3eb90e7f1b23ad9d979a6991994ff1b9daef88a1361713c6a27a
-
SSDEEP
768:2XuOLbv6nyoCYRtP7Fomc4GPx6PrU9Pht1D9TMhqDwPGbHs8Oe:lO3v6yoCYDP7w48xSrU9pt7whes8O
Malware Config
Signatures
-
Contacts a large (53975) amount of remote hosts 1 TTPs
This may indicate a network scan to discover remotely running services.
-
Creates a large amount of network flows 1 TTPs
This may indicate a network scan to discover remotely running services.
-
Modifies Watchdog functionality 1 TTPs 2 IoCs
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
description ioc File opened for modification /dev/misc/watchdog File opened for modification /dev/watchdog -
Writes file to system bin folder 1 TTPs 2 IoCs
description ioc File opened for modification /sbin/watchdog File opened for modification /bin/watchdog