Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

7

2ff230d01f...78.elf

ubuntu-18.04-amd64

10

Analysis

  • max time kernel
    152s
  • max time network
    128s
  • platform
    ubuntu-18.04_amd64
  • resource
    ubuntu1804-amd64-20231221-en
  • resource tags

    arch:amd64arch:i386image:ubuntu1804-amd64-20231221-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
  • submitted
    12/02/2024, 03:26

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    2ff230d01fde2c518dd08ef8ecfe29681cf276c35a24dc09bc77d784efd31778.elf

  • Size

    34KB

  • MD5

    06ebe0f6ff9c7cfcbb5c78c56e071ca0

  • SHA1

    5ec997e7169b07878b0aa87ac0a2176df1a2b719

  • SHA256

    2ff230d01fde2c518dd08ef8ecfe29681cf276c35a24dc09bc77d784efd31778

  • SHA512

    a76574047c2400d443d942a0e52c36940e24c6e8f37e1bcea6675111dd1240df0b7fde1286f14c4349c07e2aa9a5b9be15a822ac764862815cabe7abe8014a87

  • SSDEEP

    768:XA3Px9VZw7EY+W7MUVzsINosaAF1cGRe11a6iGBdDKq:Q3PxFw7vl7MysINolA7RWiIdDh

Score
10/10
miraibotnetbotnet

Malware Config

Extracted

Family

mirai

Botnet

BOTNET

C2

scan.rebirthltd.top

194.169.175.3

Signatures

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai
  • Changes its process name 1 IoCs
  • Deletes itself 1 IoCs
  • Reads runtime system information 2 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • /tmp/2ff230d01fde2c518dd08ef8ecfe29681cf276c35a24dc09bc77d784efd31778.elf
    /tmp/2ff230d01fde2c518dd08ef8ecfe29681cf276c35a24dc09bc77d784efd31778.elf
    1⤵
    • Changes its process name
    • Deletes itself
    • Reads runtime system information
    PID:1528

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads