Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
149s -
max time network
150s -
platform
debian-9_mips -
resource
debian9-mipsbe-20240611-en -
resource tags
arch:mipsimage:debian9-mipsbe-20240611-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem -
submitted
13/01/2025, 22:29
Behavioral task
behavioral1
Sample
camp.mips.elf
Resource
debian9-mipsbe-20240611-en
debian-9-mips
7 signatures
150 seconds
General
-
Target
camp.mips.elf
-
Size
37KB
-
MD5
c6c14dc6fbc05361ff7c98995f161cba
-
SHA1
0d8d6b3304fa714d462f6a1d332c385c57a5da47
-
SHA256
3fb29ca6184afd70cbab4b67f483bd8bfea0be22cefe97929e84f49e14fbe1fe
-
SHA512
eaf8bd0acd20169168d6174327668714341277bd7b4e3af8e29eec951421af9ff575c802e8ce108c64e9f1418ece9a966b4808159f54519106298441dd1ee899
-
SSDEEP
768:cgN29x3ZpzZ5VjNuvtE54Fe7GbxBDbYsPs4P5zTqUJgGlzDpbuR1JW:q9xJZZNKNFjBfRUMQMVJuk
Score
10/10
Malware Config
Extracted
Family
mirai
Botnet
LZRD
Signatures
-
Mirai family
-
Modifies Watchdog functionality 1 TTPs 2 IoCs
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
description ioc Process File opened for modification /dev/watchdog camp.mips.elf File opened for modification /dev/misc/watchdog camp.mips.elf -
Enumerates running processes
Discovers information about currently running processes on the system
-
Writes file to system bin folder 2 IoCs
description ioc Process File opened for modification /bin/watchdog camp.mips.elf File opened for modification /sbin/watchdog camp.mips.elf -
description ioc Process File opened for reading /proc/1/status camp.mips.elf File opened for reading /proc/76/status camp.mips.elf File opened for reading /proc/78/status camp.mips.elf File opened for reading /proc/154/status camp.mips.elf File opened for reading /proc/356/status camp.mips.elf File opened for reading /proc/383/status camp.mips.elf File opened for reading /proc/6/status camp.mips.elf File opened for reading /proc/7/status camp.mips.elf File opened for reading /proc/14/status camp.mips.elf File opened for reading /proc/20/status camp.mips.elf File opened for reading /proc/37/status camp.mips.elf File opened for reading /proc/683/status camp.mips.elf File opened for reading /proc/685/status camp.mips.elf File opened for reading /proc/713/status camp.mips.elf File opened for reading /proc/9/status camp.mips.elf File opened for reading /proc/77/status camp.mips.elf File opened for reading /proc/359/status camp.mips.elf File opened for reading /proc/384/status camp.mips.elf File opened for reading /proc/5/status camp.mips.elf File opened for reading /proc/18/status camp.mips.elf File opened for reading /proc/73/status camp.mips.elf File opened for reading /proc/679/status camp.mips.elf File opened for reading /proc/15/status camp.mips.elf File opened for reading /proc/36/status camp.mips.elf File opened for reading /proc/75/status camp.mips.elf File opened for reading /proc/81/status camp.mips.elf File opened for reading /proc/716/status camp.mips.elf File opened for reading /proc/3/status camp.mips.elf File opened for reading /proc/13/status camp.mips.elf File opened for reading /proc/21/status camp.mips.elf File opened for reading /proc/127/status camp.mips.elf File opened for reading /proc/70/status camp.mips.elf File opened for reading /proc/111/status camp.mips.elf File opened for reading /proc/177/status camp.mips.elf File opened for reading /proc/354/status camp.mips.elf File opened for reading /proc/357/status camp.mips.elf File opened for reading /proc/11/status camp.mips.elf File opened for reading /proc/23/status camp.mips.elf File opened for reading /proc/160/status camp.mips.elf File opened for reading /proc/702/status camp.mips.elf File opened for reading /proc/2/status camp.mips.elf File opened for reading /proc/16/status camp.mips.elf File opened for reading /proc/128/status camp.mips.elf File opened for reading /proc/17/status camp.mips.elf File opened for reading /proc/19/status camp.mips.elf File opened for reading /proc/24/status camp.mips.elf File opened for reading /proc/245/status camp.mips.elf File opened for reading /proc/707/status camp.mips.elf File opened for reading /proc/74/status camp.mips.elf File opened for reading /proc/4/status camp.mips.elf File opened for reading /proc/84/status camp.mips.elf File opened for reading /proc/686/status camp.mips.elf File opened for reading /proc/709/status camp.mips.elf File opened for reading /proc/8/status camp.mips.elf File opened for reading /proc/12/status camp.mips.elf File opened for reading /proc/429/status camp.mips.elf File opened for reading /proc/675/status camp.mips.elf File opened for reading /proc/703/status camp.mips.elf File opened for reading /proc/10/status camp.mips.elf File opened for reading /proc/71/status camp.mips.elf File opened for reading /proc/72/status camp.mips.elf File opened for reading /proc/83/status camp.mips.elf File opened for reading /proc/360/status camp.mips.elf File opened for reading /proc/708/status camp.mips.elf -
System Network Configuration Discovery 1 TTPs 1 IoCs
Adversaries may gather information about the network configuration of a system.
pid Process 712 camp.mips.elf