Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    0s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20240611-en
  • resource tags

    arch:armhfimage:debian9-armhf-20240611-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    02/02/2025, 17:32

General

  • Target

    nvm.arm6.elf

  • Size

    37KB

  • MD5

    71c05fd20a164cac5ea5c0104e0b0de3

  • SHA1

    c9535727e04e9e53fc7bba568e4c95830708ac90

  • SHA256

    59110daf0f11cf8dd4a9326a5443d26f52ace2ae13bd68b006ef568855c64605

  • SHA512

    451e498333fe978f2b13ee1b7bf1b88914d62346a3d5a35b0e126cc5a0b24d9f9ee356f93e498122a35bd97923b618fb4ed5c24b022e301464fed48e832dc886

  • SSDEEP

    768:ZoYlyRkBObGXIQRXakypZGvSzDiHIL1P6oQM8mBpY3UQwyz:Zfl0p8alp8afis1eMZif

Score
10/10

Malware Config

Signatures

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

  • Mirai family
  • Reads runtime system information 1 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • /tmp/nvm.arm6.elf
    /tmp/nvm.arm6.elf
    1⤵
    • Reads runtime system information
    PID:638

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads