Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    125s
  • max time network
    154s
  • platform
    debian-9_mipsel
  • resource
    debian9-mipsel-20231215-en
  • resource tags

    arch:mipselimage:debian9-mipsel-20231215-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem
  • submitted
    20/12/2023, 02:51

General

  • Target

    7ed88da0cb36991294e698b97286d87f

  • Size

    50KB

  • MD5

    7ed88da0cb36991294e698b97286d87f

  • SHA1

    bc670ba182707efb497665e60584cdb5cf28027c

  • SHA256

    6fa0bfd6e9013ea4931b32e6424986b9e773cbb5e80919ffcdc854c46432e0a7

  • SHA512

    9ee672a0bdfb129052083ee55459e46ca1bda82ea2482af3ff8d2023df3ea16297cd9b70d8e81e9902b4b98612113facf9fefd1bda85e8ba8a0569547f16b5a0

  • SSDEEP

    768:I8ErXfmCJOr6C3DXtbOqJy44WZzNDmlekeXPeyMatZ3OpOXiirG0mi8iy:I8C/RCzZD/ANOPBMEZ3OYrIi8J

Score
9/10

Malware Config

Signatures

  • Contacts a large (63163) amount of remote hosts 1 TTPs

    This may indicate a network scan to discover remotely running services.

  • Creates a large amount of network flows 1 TTPs

    This may indicate a network scan to discover remotely running services.

  • Modifies Watchdog functionality 1 TTPs 2 IoCs

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

  • Writes file to system bin folder 1 TTPs 2 IoCs

Processes

  • /tmp/7ed88da0cb36991294e698b97286d87f
    /tmp/7ed88da0cb36991294e698b97286d87f
    1⤵
      PID:727

    Network

    MITRE ATT&CK Enterprise v15

    Replay Monitor

    Loading Replay Monitor...

    Downloads