Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
149s -
max time network
151s -
platform
debian-9_mips -
resource
debian9-mipsbe-20240418-en -
resource tags
-
submitted
05/03/2025, 01:52
General
-
Target
mips.elf
-
Size
110KB
-
MD5
df824b90081efe570ed553d63d388c81
-
SHA1
b14dfbd74b42bfcb91da71cceea69c6f4995f059
-
SHA256
a96f3321201e5cbf4655b1b8c204cbbd8970a7504ca787edd4d70c32bd11a623
-
SHA512
c7662cd0db6588dec14e235f95fa722ab57d7aa86bf6897f01e25891a45bce79cd37b136453b25e890f6f80f73372ccffd77171536a70fe426a8e1552a6ce7ff
-
SSDEEP
3072:qz1u8TfSyBFataXSdQ0YCtxGCtgWmHd7BPdt:qxu8TfSyBQ4XSdS2xGEpyVdt
Malware Config
Signatures
-
Contacts a large (48965) amount of remote hosts 1 TTPs
This may indicate a network scan to discover remotely running services.
-
Creates a large amount of network flows 1 TTPs
This may indicate a network scan to discover remotely running services.
-
Modifies Watchdog functionality 1 TTPs 2 IoCs
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Changes its process name 1 IoCs
-
Reads runtime system information 25 IoCs
Reads data from /proc virtual filesystem.
-
System Network Configuration Discovery 1 TTPs 1 IoCs
Adversaries may gather information about the network configuration of a system.
Processes
-
/tmp/mips.elf/tmp/mips.elf1⤵
- Modifies Watchdog functionality
- Changes its process name
- Reads runtime system information
- System Network Configuration Discovery