Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
125s -
max time network
154s -
platform
debian-9_mipsel -
resource
debian9-mipsel-20231215-en -
resource tags
arch:mipselimage:debian9-mipsel-20231215-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem -
submitted
20/12/2023, 02:51
Behavioral task
behavioral1
Sample
7ed88da0cb36991294e698b97286d87f
Resource
debian9-mipsel-20231215-en
General
-
Target
7ed88da0cb36991294e698b97286d87f
-
Size
50KB
-
MD5
7ed88da0cb36991294e698b97286d87f
-
SHA1
bc670ba182707efb497665e60584cdb5cf28027c
-
SHA256
6fa0bfd6e9013ea4931b32e6424986b9e773cbb5e80919ffcdc854c46432e0a7
-
SHA512
9ee672a0bdfb129052083ee55459e46ca1bda82ea2482af3ff8d2023df3ea16297cd9b70d8e81e9902b4b98612113facf9fefd1bda85e8ba8a0569547f16b5a0
-
SSDEEP
768:I8ErXfmCJOr6C3DXtbOqJy44WZzNDmlekeXPeyMatZ3OpOXiirG0mi8iy:I8C/RCzZD/ANOPBMEZ3OYrIi8J
Malware Config
Signatures
-
Contacts a large (63163) amount of remote hosts 1 TTPs
This may indicate a network scan to discover remotely running services.
-
Creates a large amount of network flows 1 TTPs
This may indicate a network scan to discover remotely running services.
-
Modifies Watchdog functionality 1 TTPs 2 IoCs
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
description ioc File opened for modification /dev/watchdog File opened for modification /dev/misc/watchdog -
Writes file to system bin folder 1 TTPs 2 IoCs
description ioc File opened for modification /sbin/watchdog File opened for modification /bin/watchdog