Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

5

134.255.23...34.elf

debian-12-armhf

10

Analysis

  • max time kernel
    149s
  • max time network
    147s
  • platform
    debian-12_armhf
  • resource
    debian12-armhf-20240418-en
  • resource tags

    arch:armhfimage:debian12-armhf-20240418-enkernel:6.1.0-17-armmp-lpaelocale:en-usos:debian-12-armhfsystem
  • submitted
    01/02/2025, 23:18

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    134.255.232.87-boatnet.arm7-2025-02-01T231134.elf

  • Size

    45KB

  • MD5

    6eee0c7ddecb3c9952869c4549c8163c

  • SHA1

    e79d82fc898860984ebb1fbc2f0c0348c12767b6

  • SHA256

    dbb1f5c4eb48d335be2d2d5f0e000646f8a31a768b2207829bff4690a92503ca

  • SHA512

    766c72db8ac1e18cb43512b0e0849c701d8cc9f6cca4f6009dd491300ddb9f39557db3be7d3c82e064015acb51173b8e864bd688ac886961dc58dfa4edffda06

  • SSDEEP

    768:D/TYCoIxdEk+AxoTZAZHFeq8b3BV39q3UELbUXfi6nVMQHI4vcGpvA:DECFd+A6YHAxLGLRQZA

Score
10/10
mirailzrdbotnetdefense_evasiondiscovery

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Signatures

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai
  • Mirai family
    mirai
  • Modifies Watchdog functionality 1 TTPs 2 IoCs

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion
  • Writes file to system bin folder 2 IoCs
  • Reads runtime system information 16 IoCs

    Reads data from /proc virtual filesystem.

    discovery

Processes

  • /tmp/134.255.232.87-boatnet.arm7-2025-02-01T231134.elf
    /tmp/134.255.232.87-boatnet.arm7-2025-02-01T231134.elf
    1⤵
    • Modifies Watchdog functionality
    • Writes file to system bin folder
    • Reads runtime system information
    PID:706

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads