Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
150s -
max time network
155s -
platform
debian-12_armhf -
resource
debian12-armhf-20240221-en -
resource tags
arch:armhfimage:debian12-armhf-20240221-enkernel:6.1.0-17-armmp-lpaelocale:en-usos:debian-12-armhfsystem -
submitted
23/07/2024, 01:30
Behavioral task
behavioral1
Sample
21974e05dc5c6bbabea2f4ef9938ee926ea78d7b54fbe155b092fb67ae484f2c.elf
Resource
debian12-armhf-20240221-en
2 signatures
150 seconds
General
-
Target
21974e05dc5c6bbabea2f4ef9938ee926ea78d7b54fbe155b092fb67ae484f2c.elf
-
Size
138KB
-
MD5
175c5fbf2d7e65cfb288456bf2ab23ef
-
SHA1
7da35395ecf379180ffb17dc820e9ccd29a86b26
-
SHA256
21974e05dc5c6bbabea2f4ef9938ee926ea78d7b54fbe155b092fb67ae484f2c
-
SHA512
d81fcf1abed8f996291dceffe2343ec48d6ae70743b3eee8aff0a86aa85479e1723cfeb0307f72c3ca8d2ef4c7a9c20856b35abf38ca57920ade3872abdf0179
-
SSDEEP
3072:rZj9PrNkau2EARuOS8P8BItVS6YrZ7ouyxVjOga5X:rZjPkau2EARuOh8NdF7ouyxVjgx
Score
7/10
Malware Config
Signatures
-
Modifies Watchdog functionality 1 TTPs 2 IoCs
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
description ioc Process File opened for modification /dev/watchdog 21974e05dc5c6bbabea2f4ef9938ee926ea78d7b54fbe155b092fb67ae484f2c.elf File opened for modification /dev/misc/watchdog 21974e05dc5c6bbabea2f4ef9938ee926ea78d7b54fbe155b092fb67ae484f2c.elf -
Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself /var/Sofia 705 21974e05dc5c6bbabea2f4ef9938ee926ea78d7b54fbe155b092fb67ae484f2c.elf