Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
150s -
max time network
151s -
platform
debian-9_mips -
resource
debian9-mipsbe-20240226-en -
resource tags
arch:mipsimage:debian9-mipsbe-20240226-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem -
submitted
08/03/2024, 13:26
General
-
Target
SecuriteInfo.com.Linux.Siggen.9999.23345.18758.elf
-
Size
34KB
-
MD5
25bf0c3667f3d997be178361afaf8901
-
SHA1
a92d2c39be6e7d702752ea99647370913054e8cb
-
SHA256
77e23c6b719915ed2716a609e2e18f9855371b2f085d313ea09cb58ae5472a14
-
SHA512
b75e3e25b5f2e7883181eccb993fcc54e29aa5f6fc750cb2b4f444856a0c5587544b6feba5b48c03dcb58833dcdd338f46646a58cbd01fad9e268a54aa3d027f
-
SSDEEP
768:ChaSTWR1YHntU+nX1fEYGP+2xoYTEeKJUC3JgGlzDpUYsf:Uruith1fEIelC1VqYE
Malware Config
Extracted
Family
mirai
Botnet
MIRAI
Signatures
-
Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself a 708 SecuriteInfo.com.Linux.Siggen.9999.23345.18758.elf -
Reads runtime system information 6 IoCs
Reads data from /proc virtual filesystem.
description ioc Process File opened for reading /proc/self/exe SecuriteInfo.com.Linux.Siggen.9999.23345.18758.elf File opened for reading /proc/1/maps Process not Found File opened for reading /proc/2/maps Process not Found File opened for reading /proc/3/maps Process not Found File opened for reading /proc/4/maps Process not Found File opened for reading /proc/5/maps Process not Found