Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
149s -
max time network
149s -
platform
ubuntu-20.04_amd64 -
resource
ubuntu2004-amd64-20240508-en -
resource tags
-
submitted
20/05/2024, 15:24
General
-
Target
a647b496fb36d4ea7f34092cd929ec3f.elf
-
Size
57KB
-
MD5
a647b496fb36d4ea7f34092cd929ec3f
-
SHA1
39951142bb9bba0ff372118ec5793974ce093ae6
-
SHA256
864dd2c515bc94a27f0905ba64c4ef1f79774e47eab6e609ad66952f72b71296
-
SHA512
b1aef307a85e61187338db80c5b90f51c4f75653c5cfa2d041a3a496d6c92aef17d567b40ae5d704b795f1fe163927bb1237f1dcc27ee2916dfb460777ce46af
-
SSDEEP
1536:WOPeqz/9RRV/6D3NjVkkh6oQYrY1NnohDcrJAFY6mSj/:WMe6/9RRV/w3NhkkQoQYrYPncD6JEr7/
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Modifies Watchdog functionality 1 TTPs 2 IoCs
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Traces itself 1 IoCs
Traces itself to prevent debugging attempts
-
Writes file to system bin folder 1 TTPs 2 IoCs
-
Changes its process name 1 IoCs
-
Reads runtime system information 1 IoCs
Reads data from /proc virtual filesystem.
Processes
-
/tmp/a647b496fb36d4ea7f34092cd929ec3f.elf/tmp/a647b496fb36d4ea7f34092cd929ec3f.elf1⤵
- Deletes itself
- Modifies Watchdog functionality
- Traces itself
- Writes file to system bin folder
- Changes its process name
- Reads runtime system information