Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
149s -
max time network
151s -
platform
debian-9_mips -
resource
debian9-mipsbe-20240729-en -
resource tags
arch:mipsimage:debian9-mipsbe-20240729-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem -
submitted
03/02/2025, 10:23
Behavioral task
behavioral1
Sample
main_mips.elf
Resource
debian9-mipsbe-20240729-en
5 signatures
150 seconds
General
-
Target
main_mips.elf
-
Size
169KB
-
MD5
b96b01c006be8bed9cfbc846f24ed243
-
SHA1
a16a2ec6b2ad2dac6a4aa5f9fa692a225ea2dcf9
-
SHA256
92787cf7e4c3dd1ad45056c1a6eed0360b42e74900de7afe2df4080345ac879b
-
SHA512
b9a3d249420ec40fceeec654d8e01a1d3db285c5e7d51e3ae503dd02f2d48f18006690a631acbd285182368cf182a506153e486341ae85b4e715bef8c27607ff
-
SSDEEP
3072:jg57RM7LHZwbq1YSBan1yvbysxr1uGSKI:jglRM7LHZ0Bqyy1BSKI
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
pid Process 698 main_mips.elf -
Traces itself 2 IoCs
Traces itself to prevent debugging attempts
pid Process 698 main_mips.elf 699 main_mips.elf -
Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself httpd 698 main_mips.elf -
System Network Configuration Discovery 1 TTPs 1 IoCs
Adversaries may gather information about the network configuration of a system.
pid Process 698 main_mips.elf -
Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
description ioc Process File opened for modification /tmp/main_mips.elf main_mips.elf