Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
104s -
max time network
108s -
platform
debian-12_mipsel -
resource
debian12-mipsel-20240221-en -
resource tags
arch:mipselimage:debian12-mipsel-20240221-enkernel:6.1.0-17-4kc-maltalocale:en-usos:debian-12-mipselsystem -
submitted
23/08/2024, 09:40
Behavioral task
behavioral1
Sample
54cbb2a24f80cf83934de6838719a4e3fb2fea97f95265d1cdca6724b57ec3c1.elf
Resource
debian12-mipsel-20240221-en
General
-
Target
54cbb2a24f80cf83934de6838719a4e3fb2fea97f95265d1cdca6724b57ec3c1.elf
-
Size
176KB
-
MD5
849d40b8df5f9c0a2d3458afaf0c9c13
-
SHA1
af61ebfc16e43071360103d89bb25a4d7150b0bb
-
SHA256
54cbb2a24f80cf83934de6838719a4e3fb2fea97f95265d1cdca6724b57ec3c1
-
SHA512
6ecf6c7d0d6d5dbdda3fbd1814fa451be50ee758b9805abbdc239d771dc2b3abb076213b9f85ea932fe3861e5dabb030ae76fbcb811560870a9c8e754914e007
-
SSDEEP
1536:G4ejB3lheoUrgk1QfC6bRR6/rscCJ9tFD0Mc8QJ7I5er6/fS4bRmdanKs6rSH:GPeNl/wVJ9tak6r6iym0nKs6rSH
Malware Config
Signatures
-
Modifies Watchdog functionality 1 TTPs 2 IoCs
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
description ioc Process File opened for modification /dev/watchdog 54cbb2a24f80cf83934de6838719a4e3fb2fea97f95265d1cdca6724b57ec3c1.elf File opened for modification /dev/misc/watchdog 54cbb2a24f80cf83934de6838719a4e3fb2fea97f95265d1cdca6724b57ec3c1.elf -
Changes its process name 1 IoCs
description pid Process Changes the process name, possibly in an attempt to hide itself 744 54cbb2a24f80cf83934de6838719a4e3fb2fea97f95265d1cdca6724b57ec3c1.elf