Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
29s -
max time network
30s -
platform
ubuntu-24.04_amd64 -
resource
ubuntu2404-amd64-20240523-en -
resource tags
-
submitted
06/03/2025, 16:08
General
-
Target
morte.x86
-
Size
34KB
-
MD5
23d32e07cce0492a5264708f8928ccb3
-
SHA1
b6a776f0aefcbf8796a6b4f35024a48e9f64c322
-
SHA256
0ed5cda2f77c36ed45d40bf6fc72e30a8a85d71482e8efb0729277a6eb06285f
-
SHA512
ba38cd5d4bf5eb2bb6308cbdc525367a2faf5c69236d0a921021ad8fae45ba946118ea357cbd4830958933023372c53866652ce7015d9b514400cbd885f470dc
-
SSDEEP
768:f0hi6c3krEDJjRIpKlA3FxmW4s6MK66pyqdfJhb+t:968kYDJVzlA1xmdiK6We
Score
9/10
Malware Config
Signatures
-
Contacts a large (4798) amount of remote hosts 1 TTPs
This may indicate a network scan to discover remotely running services.
-
Loads a kernel module 3 IoCs
Loads a Linux kernel module, potentially to achieve persistence
-
Creates a large amount of network flows 1 TTPs
This may indicate a network scan to discover remotely running services.
-
Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
Processes
-
/tmp/morte.x86/tmp/morte.x861⤵
- Loads a kernel module
- Writes file to tmp directory