Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    150s
  • max time network
    151s
  • platform
    debian-9_mips
  • resource
    debian9-mipsbe-20240226-en
  • resource tags

    arch:mipsimage:debian9-mipsbe-20240226-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
  • submitted
    06/04/2024, 01:21

General

  • Target

    ec0cf7c73f96616064d9cd397ff17a7e13da321111de6358ae4964c1d670937f.elf

  • Size

    28KB

  • MD5

    5207cc61ac28e9784f34ae9b17e3760f

  • SHA1

    378286ac93a043eadd1b4ae5699852211e8357b8

  • SHA256

    ec0cf7c73f96616064d9cd397ff17a7e13da321111de6358ae4964c1d670937f

  • SHA512

    e9eaa58b893dd9b2279824e665e7656c08d5ff0776bd8f9ac2ce887418415581c21070315e778333b73b6e3eb985aa13fc9206ce6070dae5cdc9834ca982a6b3

  • SSDEEP

    768:ReV+dOnq6bj9EGyAhsI5izU8UY/49I5nEH7z1JgGlzDpbuR1J+:UV+dKd/ZhsIOUP9I5nEbzvVJuA

Malware Config

Extracted

Family

mirai

Botnet

BOTNET

Signatures

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

  • Contacts a large (114100) amount of remote hosts 1 TTPs

    This may indicate a network scan to discover remotely running services.

  • Creates a large amount of network flows 1 TTPs

    This may indicate a network scan to discover remotely running services.

  • Changes its process name 1 IoCs
  • Modifies Watchdog functionality 1 TTPs 2 IoCs

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Reads runtime system information 64 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • /tmp/ec0cf7c73f96616064d9cd397ff17a7e13da321111de6358ae4964c1d670937f.elf
    /tmp/ec0cf7c73f96616064d9cd397ff17a7e13da321111de6358ae4964c1d670937f.elf
    1⤵
    • Changes its process name
    • Modifies Watchdog functionality
    PID:692

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads