Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    149s
  • max time network
    6s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20240729-en
  • resource tags

    arch:armhfimage:debian9-armhf-20240729-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    01/01/2025, 01:13 UTC

General

  • Target

    bffc0b923efab28f6fa96aa9db459193da608dd26226124dfeecbe3957602869.elf

  • Size

    45KB

  • MD5

    3dee7a742c3240832d92af16796cbf41

  • SHA1

    be1443888c2bbfd454511ae89d7088a48f704fdc

  • SHA256

    bffc0b923efab28f6fa96aa9db459193da608dd26226124dfeecbe3957602869

  • SHA512

    d145d1f33d609880468730e3290725e259f3d62b87147de764ee621cababe4ab92045a01cb06d4518cc7e1c8af4e38016cda423dab5d3ac570c60af2d835cec1

  • SSDEEP

    768:D/TYCoIxdEk+AxoTZAZHFeq8b35sLN9q3UELbUXfi6nVMQHI4vcGpvb:DECFd+A6YHAxqgLRQZb

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Signatures

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

  • Mirai family
  • Modifies Watchdog functionality 1 TTPs 2 IoCs

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Writes file to system bin folder 2 IoCs
  • Reads runtime system information 31 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • /tmp/bffc0b923efab28f6fa96aa9db459193da608dd26226124dfeecbe3957602869.elf
    /tmp/bffc0b923efab28f6fa96aa9db459193da608dd26226124dfeecbe3957602869.elf
    1⤵
    • Modifies Watchdog functionality
    • Writes file to system bin folder
    • Reads runtime system information
    PID:652

Network

    No results found
  • 104.168.45.33:3778
    325 B
    216 B
    6
    4
No results found

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.