Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

b581921d4b...46.elf

debian-9-mipsel

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b581921d4bd98e2662e6f3d2bdb93a46.elf

  • Size

    155KB

  • Sample

    240222-1bwg1sfc9t

  • MD5

    b581921d4bd98e2662e6f3d2bdb93a46

  • SHA1

    c13296ea2602116bd39de01a5acb5827b8bd8c92

  • SHA256

    98fd5efa1b4c4733aa5e7336a1d5ea718deae7a3e712249d47df3aedf3d13011

  • SHA512

    394f6571ea8747fa2893e5850d2a85e551efaf714cdec9a46f0e857e2d17d2b849b50d29f513840caeee5f8e0078a4bbcbd95b31dce8117b78e991a93adb417f

  • SSDEEP

    3072:1LNqrhHZ0P6bRFBQipfRjHkLwmrThPaLEne7rNb:1Lsrr0PeRTJrgLwmrThPaLEne7rNb

Score
10/10
gafgyt

Malware Config

Targets

    • Target

      b581921d4bd98e2662e6f3d2bdb93a46.elf

    • Size

      155KB

    • MD5

      b581921d4bd98e2662e6f3d2bdb93a46

    • SHA1

      c13296ea2602116bd39de01a5acb5827b8bd8c92

    • SHA256

      98fd5efa1b4c4733aa5e7336a1d5ea718deae7a3e712249d47df3aedf3d13011

    • SHA512

      394f6571ea8747fa2893e5850d2a85e551efaf714cdec9a46f0e857e2d17d2b849b50d29f513840caeee5f8e0078a4bbcbd95b31dce8117b78e991a93adb417f

    • SSDEEP

      3072:1LNqrhHZ0P6bRFBQipfRjHkLwmrThPaLEne7rNb:1Lsrr0PeRTJrgLwmrThPaLEne7rNb

    Score
    7/10

    • Changes its process name

    • Executes dropped EXE

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks