Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    1s
  • max time network
    136s
  • platform
    ubuntu-20.04_amd64
  • resource
    ubuntu2004-amd64-20240221-en
  • resource tags

    arch:amd64arch:i386image:ubuntu2004-amd64-20240221-enkernel:5.4.0-169-genericlocale:en-usos:ubuntu-20.04-amd64system
  • submitted
    12/04/2024, 01:33

General

  • Target

    c64d82b9975cd2c5eb459202abfc1c8d4b2c3553837b5614fbea9452b1f13b8d.elf

  • Size

    38KB

  • MD5

    d130aba77f3935dc458670fab9155814

  • SHA1

    ea8038822882b9a9a381fce4c55878b072ea31a7

  • SHA256

    c64d82b9975cd2c5eb459202abfc1c8d4b2c3553837b5614fbea9452b1f13b8d

  • SHA512

    44d8dbe361f9abed78641a4e2644dfb31ae015a47592860fe17408dee304af220c20b4d303d35c71ddcebaad9c6fa8f90659806ad74909abee630d4552edcf25

  • SSDEEP

    768:NhkWFddTwvyxziqCboL2mvjGD1KNT2DbdGjf7403Q:N2ITwqgqCbCA1KH403Q

Score
10/10

Malware Config

Extracted

Family

mirai

Botnet

BOTNET

Signatures

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

  • Changes its process name 1 IoCs
  • Modifies Watchdog functionality 1 TTPs 2 IoCs

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

Processes

  • /tmp/c64d82b9975cd2c5eb459202abfc1c8d4b2c3553837b5614fbea9452b1f13b8d.elf
    /tmp/c64d82b9975cd2c5eb459202abfc1c8d4b2c3553837b5614fbea9452b1f13b8d.elf
    1⤵
    • Changes its process name
    • Modifies Watchdog functionality
    PID:1483

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads