Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    136s
  • max time network
    157s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20240611-en
  • resource tags

    arch:armhfimage:debian9-armhf-20240611-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    11/01/2025, 09:37

General

  • Target

    Space.arm.elf

  • Size

    38KB

  • MD5

    6e4bbb8b19271e5da4eb725b20462314

  • SHA1

    0b818439ae6b16ddab298143d5ef6b9174dd51b9

  • SHA256

    891ac4bb320725449b549ea5c7dedb37c3e4cdd408f43913bdc9eb25d698cc72

  • SHA512

    8ef5b0455c3392eef320f56d0e1f92b98006d33cefcbfae63730fc8cf6b69284eb0b9f27e0aa05e76bf659f78df52c5649d476f187c5d3efbab3f98606cd5300

  • SSDEEP

    768:cu7RATMUu4f7RDdP6NM8I52VNbvdFsDJ456Bs3UozOX:tRAC4fNDdP6N5pd+DwzOX

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Signatures

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

  • Mirai family
  • Modifies Watchdog functionality 1 TTPs 2 IoCs

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Writes file to system bin folder 2 IoCs
  • Reads runtime system information 64 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • /tmp/Space.arm.elf
    /tmp/Space.arm.elf
    1⤵
    • Modifies Watchdog functionality
    • Writes file to system bin folder
    • Reads runtime system information
    PID:648

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads