Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
139s -
max time network
141s -
platform
debian-9_mipsel -
resource
debian9-mipsel-20240611-en -
resource tags
arch:mipselimage:debian9-mipsel-20240611-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem -
submitted
19/02/2025, 04:48
Behavioral task
behavioral1
Sample
8b1e3796c8966e3bb399971971af13cf8572f3b5f453cfc0406aedede30f0157.elf
Resource
debian9-mipsel-20240611-en
General
-
Target
8b1e3796c8966e3bb399971971af13cf8572f3b5f453cfc0406aedede30f0157.elf
-
Size
176KB
-
MD5
77cf21f0635467b7f058badd33945d2d
-
SHA1
e410765cdd01eb0cb585577dafff2b9f43fe65df
-
SHA256
8b1e3796c8966e3bb399971971af13cf8572f3b5f453cfc0406aedede30f0157
-
SHA512
61958f76d08554fb639ea3a98408eee3d9a9a7b6a02b376856141f5068f17907ad5c2fbd296deecf18cb39d6db8b21c730753de482d5e923348d1554c83c1a19
-
SSDEEP
1536:O4ejx3x6/r5/FQF56rRR6/rYcmw+tp07LQiUG5eip4dimmeBy/mdanKs6cSH:Oz1/cZw+t+v8iWiEy/m0nKs6cSH
Malware Config
Signatures
-
Modifies Watchdog functionality 1 TTPs 2 IoCs
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
description ioc Process File opened for modification /dev/watchdog 8b1e3796c8966e3bb399971971af13cf8572f3b5f453cfc0406aedede30f0157.elf File opened for modification /dev/misc/watchdog 8b1e3796c8966e3bb399971971af13cf8572f3b5f453cfc0406aedede30f0157.elf -
Changes its process name 1 IoCs
description pid Process Changes the process name, possibly in an attempt to hide itself 713 8b1e3796c8966e3bb399971971af13cf8572f3b5f453cfc0406aedede30f0157.elf