Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    148s
  • max time network
    160s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20240611-en
  • resource tags

    arch:armhfimage:debian9-armhf-20240611-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    26/12/2024, 02:05 UTC

General

  • Target

    23c755af25bd1583d921516e53cba4413cfb32af53fac18aff5e56f459897de1.elf

  • Size

    60KB

  • MD5

    581d4c734cbbd63efe366dd2a9c2b313

  • SHA1

    1c783cdd78aedbc7dceba8fde931e628ac6af08e

  • SHA256

    23c755af25bd1583d921516e53cba4413cfb32af53fac18aff5e56f459897de1

  • SHA512

    da941205145bddddefbe8e2247c4fed69a48bc5005df0fe30bc9b7a84c28cd34f533594e0b7ec33093b5645a33b01d80b4be2d8dfed5e0a69c10ee95563385ee

  • SSDEEP

    1536:pVQSmwtMJXmejt3ILTM5Tfv83KJ2crl2EWc:pVywt8XZ+LgTX83KHl2EWc

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Signatures

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

  • Mirai family
  • Modifies Watchdog functionality 1 TTPs 2 IoCs

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Writes file to system bin folder 2 IoCs
  • Reads runtime system information 64 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • /tmp/23c755af25bd1583d921516e53cba4413cfb32af53fac18aff5e56f459897de1.elf
    /tmp/23c755af25bd1583d921516e53cba4413cfb32af53fac18aff5e56f459897de1.elf
    1⤵
    • Modifies Watchdog functionality
    • Writes file to system bin folder
    • Reads runtime system information
    PID:655

Network

    No results found
  • 154.216.20.216:3778
    240 B
    4
  • 154.216.20.216:3778
    240 B
    4
  • 154.216.20.216:3778
    240 B
    4
  • 154.216.20.216:3778
    240 B
    4
  • 154.216.20.216:3778
    240 B
    4
  • 154.216.20.216:3778
    240 B
    4
  • 154.216.20.216:3778
    240 B
    4
  • 154.216.20.216:3778
    240 B
    4
  • 154.216.20.216:3778
    240 B
    4
  • 154.216.20.216:3778
    240 B
    4
  • 154.216.20.216:3778
    240 B
    4
  • 154.216.20.216:3778
    240 B
    4
  • 154.216.20.216:3778
    240 B
    4
  • 154.216.20.216:3778
    240 B
    4
  • 154.216.20.216:3778
    240 B
    4
  • 154.216.20.216:3778
    240 B
    4
  • 154.216.20.216:3778
    240 B
    4
  • 154.216.20.216:3778
    240 B
    4
  • 154.216.20.216:3778
    240 B
    4
  • 154.216.20.216:3778
    240 B
    4
  • 154.216.20.216:3778
    240 B
    4
  • 154.216.20.216:3778
    240 B
    4
  • 154.216.20.216:3778
    240 B
    4
  • 154.216.20.216:3778
    240 B
    4
  • 154.216.20.216:3778
    240 B
    4
  • 154.216.20.216:3778
    240 B
    4
  • 154.216.20.216:3778
    180 B
    3
  • 154.216.20.216:3778
    120 B
    2
No results found

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.