Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
0s -
max time network
132s -
platform
ubuntu-20.04_amd64 -
resource
ubuntu2004-amd64-20240221-en -
resource tags
arch:amd64arch:i386image:ubuntu2004-amd64-20240221-enkernel:5.4.0-169-genericlocale:en-usos:ubuntu-20.04-amd64system -
submitted
11/04/2024, 21:38
General
-
Target
d130aba77f3935dc458670fab9155814.elf
-
Size
38KB
-
MD5
d130aba77f3935dc458670fab9155814
-
SHA1
ea8038822882b9a9a381fce4c55878b072ea31a7
-
SHA256
c64d82b9975cd2c5eb459202abfc1c8d4b2c3553837b5614fbea9452b1f13b8d
-
SHA512
44d8dbe361f9abed78641a4e2644dfb31ae015a47592860fe17408dee304af220c20b4d303d35c71ddcebaad9c6fa8f90659806ad74909abee630d4552edcf25
-
SSDEEP
768:NhkWFddTwvyxziqCboL2mvjGD1KNT2DbdGjf7403Q:N2ITwqgqCbCA1KH403Q
Malware Config
Extracted
Family
mirai
Botnet
BOTNET
Signatures
-
Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself /var/Sofia 1479 d130aba77f3935dc458670fab9155814.elf -
Modifies Watchdog functionality 1 TTPs 2 IoCs
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
description ioc Process File opened for modification /dev/watchdog d130aba77f3935dc458670fab9155814.elf File opened for modification /dev/misc/watchdog d130aba77f3935dc458670fab9155814.elf