Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

7

sora.arm.elf

debian-9-armhf

10

Analysis

  • max time kernel
    1s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20231221-en
  • resource tags

    arch:armhfimage:debian9-armhf-20231221-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    14/02/2024, 01:51

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    sora.arm.elf

  • Size

    27KB

  • MD5

    22d550ea40787e033826062b50c62abb

  • SHA1

    4c2b431a562ebb8ac23d5f9f965ac8f8f4eeb198

  • SHA256

    c5a268dff09a4e70565fc7ceabfaba0d4b3441c2bd62b22268013a7be6d72d6f

  • SHA512

    4077eb763d39daf8d2062813ce511f71d3144775c687619a92bbb52d91d35824a5fbf2fc22c92562dd783ce82d50b835f3f7abcc67ffae8c6da0fb26adcdb9e2

  • SSDEEP

    384:AOt/koxisa34beDtZwuaCBsk+G9lLSsLYSTFs9u8OtqlrNEY6gbhymdGUop5hj:AWsoTAZ3alkXLvFh8nNEY6gbs3Uozp

Score
10/10
miraisorabotnet

Malware Config

Extracted

Family

mirai

Botnet

SORA

Signatures

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai
  • Reads runtime system information 1 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • /tmp/sora.arm.elf
    /tmp/sora.arm.elf
    1⤵
    • Reads runtime system information
    PID:658

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads