Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
150s -
max time network
150s -
platform
debian-9_mips -
resource
debian9-mipsbe-20240418-en -
resource tags
arch:mipsimage:debian9-mipsbe-20240418-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem -
submitted
29/12/2024, 12:48
Behavioral task
behavioral1
Sample
main_mips.elf
Resource
debian9-mipsbe-20240418-en
5 signatures
150 seconds
General
-
Target
main_mips.elf
-
Size
169KB
-
MD5
ca2ada86494935fe869776a52d33cd0c
-
SHA1
044e1cf2e7eb0f668c42bc4f849d88f8756761e8
-
SHA256
f3df955801f9409909f49647b63a713dac1d3ffc7271d123b3e60d262540b6f3
-
SHA512
3ec0f3882bd26a8777e5e5e3e324d42f3009f8e091461760d8af229aeb24cb2ea883517e08c70819a0384b77839dddfc9c45ea8e85b036b692fb582585b0ad96
-
SSDEEP
3072:vg57xz7LHZwbq1ESBa3VCvrCsWrFesCwX:vglxz7LHZgh6C9FHCwX
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
pid Process 703 main_mips.elf -
Traces itself 2 IoCs
Traces itself to prevent debugging attempts
pid Process 703 main_mips.elf 704 main_mips.elf -
Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself httpd 703 main_mips.elf -
System Network Configuration Discovery 1 TTPs 1 IoCs
Adversaries may gather information about the network configuration of a system.
pid Process 703 main_mips.elf -
Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
description ioc Process File opened for modification /tmp/main_mips.elf main_mips.elf