Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    0s
  • max time network
    131s
  • platform
    ubuntu-20.04_amd64
  • resource
    ubuntu2004-amd64-20240221-en
  • resource tags

    arch:amd64arch:i386image:ubuntu2004-amd64-20240221-enkernel:5.4.0-169-genericlocale:en-usos:ubuntu-20.04-amd64system
  • submitted
    16/03/2024, 02:18

General

  • Target

    42dd965f5e69a2989b62194fb1664eb5a6aee549f372f0f347e047dc07afd93c.elf

  • Size

    42KB

  • MD5

    558b844595f92ec03b7a6566204ffb35

  • SHA1

    a27ca5dc993cc6407fc8c59901a3c75ca1b003c8

  • SHA256

    42dd965f5e69a2989b62194fb1664eb5a6aee549f372f0f347e047dc07afd93c

  • SHA512

    b4f7747c941b38c6784e5b1112c26dedd5b4ee5c2a7d8cb56498fcf44fc824d2830b1ce395c10e24e5e6385ef14d941ab40160f4e6b5e4c133fa5e64d60b53c0

  • SSDEEP

    768:Pryy1i4WU+3HDW8THmFlhQXjwm3T8zz6s4t/u92D6PCxfTjYRcbfnbcuyD7UVyq9:PZ10lqsHmfhK8zOsEu92D6PCVY2nouyE

Score
10/10

Malware Config

Extracted

Family

mirai

Botnet

UNSTABLE

C2

owo.p3pr00t.com

Signatures

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

  • Deletes itself 1 IoCs
  • Reads runtime system information 1 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • /tmp/42dd965f5e69a2989b62194fb1664eb5a6aee549f372f0f347e047dc07afd93c.elf
    /tmp/42dd965f5e69a2989b62194fb1664eb5a6aee549f372f0f347e047dc07afd93c.elf
    1⤵
    • Deletes itself
    • Reads runtime system information
    PID:1488

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads