Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
146s -
max time network
148s -
platform
debian-9_mips -
resource
debian9-mipsbe-20240418-en -
resource tags
arch:mipsimage:debian9-mipsbe-20240418-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem -
submitted
19/02/2025, 05:01
Behavioral task
behavioral1
Sample
9c1c47ecf0f4d8571b8f25ce992cd92a4802ec5321ab3e3fa4204a1b9215721c.elf
Resource
debian9-mipsbe-20240418-en
General
-
Target
9c1c47ecf0f4d8571b8f25ce992cd92a4802ec5321ab3e3fa4204a1b9215721c.elf
-
Size
176KB
-
MD5
737dc65c97061db8856daae61f0c183a
-
SHA1
d961d927f77ae330579ee1ac83ebb8e85a880d82
-
SHA256
9c1c47ecf0f4d8571b8f25ce992cd92a4802ec5321ab3e3fa4204a1b9215721c
-
SHA512
1de3553334c8765bb9a9c73f64bfb1f2e6a9a412eca0812f5c1ce3ade14c587cb4e0a418cfb9950917e6fd6e28dc8dda71fb85327dbe59c11bd34732a7ab0fd4
-
SSDEEP
3072:nORcfTNDHM2pFZfauqJGe24m62sGJyhcEXE2hgupLsTAzloRtSLxnHlhKQsKdJaI:Ou9dudJR+3SUNsam0nKXcSH
Malware Config
Signatures
-
Modifies Watchdog functionality 1 TTPs 2 IoCs
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
description ioc Process File opened for modification /dev/watchdog 9c1c47ecf0f4d8571b8f25ce992cd92a4802ec5321ab3e3fa4204a1b9215721c.elf File opened for modification /dev/misc/watchdog 9c1c47ecf0f4d8571b8f25ce992cd92a4802ec5321ab3e3fa4204a1b9215721c.elf -
Changes its process name 1 IoCs
description pid Process Changes the process name, possibly in an attempt to hide itself 709 9c1c47ecf0f4d8571b8f25ce992cd92a4802ec5321ab3e3fa4204a1b9215721c.elf