Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
5f90b43f04ba0454040c855894487c4b0a0d059e0e05c8f1a9b5ae47162418d8.elf
-
Size
74KB
-
Sample
240705-brl6vayfpm
-
MD5
bc54f0401d7ab5206671d41da278436f
-
SHA1
321cd783fd423faea05722587df00a55746e466b
-
SHA256
5f90b43f04ba0454040c855894487c4b0a0d059e0e05c8f1a9b5ae47162418d8
-
SHA512
d6a41971613d0ea8bdbd911e4b890c430397d355131765215d2d55389c71cd3f74dc5bfc45d8f624514f48bd76579fe9601f1362412897ccb354bd60e10910bc
-
SSDEEP
1536:5Vs/30tt4sqsU/ksl6Z25LW7s37Ft37LvxPhdjbD3nI8sRK:SEL4sqsbsl6Z25fPTf3nIg
Static task
static1
Behavioral task
behavioral1
Sample
5f90b43f04ba0454040c855894487c4b0a0d059e0e05c8f1a9b5ae47162418d8.elf
Resource
debian9-mipsbe-20240611-en
Malware Config
Targets
-
-
Target
5f90b43f04ba0454040c855894487c4b0a0d059e0e05c8f1a9b5ae47162418d8.elf
-
Size
74KB
-
MD5
bc54f0401d7ab5206671d41da278436f
-
SHA1
321cd783fd423faea05722587df00a55746e466b
-
SHA256
5f90b43f04ba0454040c855894487c4b0a0d059e0e05c8f1a9b5ae47162418d8
-
SHA512
d6a41971613d0ea8bdbd911e4b890c430397d355131765215d2d55389c71cd3f74dc5bfc45d8f624514f48bd76579fe9601f1362412897ccb354bd60e10910bc
-
SSDEEP
1536:5Vs/30tt4sqsU/ksl6Z25LW7s37Ft37LvxPhdjbD3nI8sRK:SEL4sqsbsl6Z25fPTf3nIg
Score9/10-
Contacts a large (86746) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Renames itself
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-