Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    143s
  • max time network
    148s
  • platform
    ubuntu-20.04_amd64
  • resource
    ubuntu2004-amd64-20240729-en
  • resource tags

    arch:amd64arch:i386image:ubuntu2004-amd64-20240729-enkernel:5.4.0-169-genericlocale:en-usos:ubuntu-20.04-amd64system
  • submitted
    21/09/2024, 01:15

General

  • Target

    282e83f41672453454d791746f164c6c6fb499400e388c1a217c831b15aed9c9.elf

  • Size

    52KB

  • MD5

    b185b15614515fcbcd6caec13efb3e14

  • SHA1

    f524f7492f995f462a38b14d2d0b8f6bb9089344

  • SHA256

    282e83f41672453454d791746f164c6c6fb499400e388c1a217c831b15aed9c9

  • SHA512

    9ade8186e8328935d32f2c947fade17d5b6b45dc8020d760f14ebdb62f2ed89e383e56b28006cb01ac7554e516d3e1888429588a6aba52203b1562a925b17a51

  • SSDEEP

    1536:lO/z5JrBCOATa9AxkDh1kQ2UQAc9RmdxOBu4yt+ygFuGT:lo5qTXq/kQeT4YjuGT

Score
10/10

Malware Config

Signatures

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

  • Changes its process name 1 IoCs
  • Reads runtime system information 1 IoCs

    Reads data from /proc virtual filesystem.

  • Writes file to tmp directory 4 IoCs

    Malware often drops required files in the /tmp directory.

Processes

  • /tmp/282e83f41672453454d791746f164c6c6fb499400e388c1a217c831b15aed9c9.elf
    /tmp/282e83f41672453454d791746f164c6c6fb499400e388c1a217c831b15aed9c9.elf
    1⤵
    • Changes its process name
    • Reads runtime system information
    • Writes file to tmp directory
    PID:1386

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads