Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    149s
  • max time network
    152s
  • platform
    ubuntu-22.04_amd64
  • resource
    ubuntu2204-amd64-20240522.1-en
  • resource tags

    arch:amd64arch:i386image:ubuntu2204-amd64-20240522.1-enkernel:5.15.0-105-genericlocale:en-usos:ubuntu-22.04-amd64system
  • submitted
    18/10/2024, 02:53

General

  • Target

    dab3c1ce525c7708b899d0f3bf694dc2e900c320f8fc2cc7273dffb008e11aee.elf

  • Size

    136KB

  • MD5

    4e85d34d25527cc810b92a8556429bc6

  • SHA1

    72852b81bccbf22df1a15ada66e589048f06b464

  • SHA256

    dab3c1ce525c7708b899d0f3bf694dc2e900c320f8fc2cc7273dffb008e11aee

  • SHA512

    33b21d8403bc47c39743ba386e7f0b0555844f4c660a52ad5ae52d6ad5d74f1b5432e9714ed83069f1fd283991e519a509cebb8d30a6be05869697d0b97381f3

  • SSDEEP

    3072:2PQN53AZa39lp3jWBzq34vUNTHCQrBJB5:LAZa0Y3y+TzVJB

Malware Config

Signatures

  • Deletes itself 1 IoCs
  • Modifies Watchdog functionality 1 TTPs 2 IoCs

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Changes its process name 6 IoCs
  • Reads runtime system information 64 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • /tmp/dab3c1ce525c7708b899d0f3bf694dc2e900c320f8fc2cc7273dffb008e11aee.elf
    /tmp/dab3c1ce525c7708b899d0f3bf694dc2e900c320f8fc2cc7273dffb008e11aee.elf
    1⤵
    • Deletes itself
    • Modifies Watchdog functionality
    • Changes its process name
    • Reads runtime system information
    PID:1565

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads