Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    149s
  • max time network
    148s
  • platform
    debian-9_mips
  • resource
    debian9-mipsbe-20240729-en
  • resource tags

    arch:mipsimage:debian9-mipsbe-20240729-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
  • submitted
    29/12/2024, 12:47

General

  • Target

    bot.mips.elf

  • Size

    169KB

  • MD5

    1dce4472a2100edd42d0019148b0277a

  • SHA1

    b3a0d9eb8e7cc79f8fbf7c66244fc55b3c18b34f

  • SHA256

    90a0b63e99e6babab212417b32c751202be099e08411d85c16dd2342e88dc598

  • SHA512

    a05943c7b2c11facc188c5a1b2744407ea39ed69946c74a04beb244d32fbfe3f173cc6e398fb0e75a05546c2ec1f942947b83d1e97d2ca16f11de713bd22b196

  • SSDEEP

    1536:yl2JvnXPvLfQ+chMJdDNsCK9HFP18tOQGgezLiM+C27TfF+h/iuf/P/zSd/o:ygv/7cwZsCK9ltSOQ+LidFS/v/PbSVo

Score
6/10

Malware Config

Signatures

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Changes its process name 1 IoCs
  • Reads runtime system information 64 IoCs

    Reads data from /proc virtual filesystem.

  • System Network Configuration Discovery 1 TTPs 1 IoCs

    Adversaries may gather information about the network configuration of a system.

Processes

  • /tmp/bot.mips.elf
    /tmp/bot.mips.elf
    1⤵
    • Changes its process name
    • Reads runtime system information
    • System Network Configuration Discovery
    PID:715

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads