Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
149s -
max time network
153s -
platform
ubuntu-22.04_amd64 -
resource
ubuntu2204-amd64-20240611-en -
resource tags
arch:amd64arch:i386image:ubuntu2204-amd64-20240611-enkernel:5.15.0-105-genericlocale:en-usos:ubuntu-22.04-amd64system -
submitted
07/03/2025, 00:32
Behavioral task
behavioral1
Sample
morte.x86.elf
Resource
ubuntu2204-amd64-20240611-en
General
-
Target
morte.x86.elf
-
Size
35KB
-
MD5
c3ab76f0ae33671f000479ea96c20623
-
SHA1
86bad9affe399e4203af9b3af245b26f6e99a644
-
SHA256
5429b6c53444238c6b022fda5814edb7b4f93649fc5cd20c3faa01ee688ed9de
-
SHA512
8dc92843d5f942817ebe290a114ef54b5acb282dce8c43e9913c10b5b03711fe555b8e260a5bc77b25a6a27998bb8759f3282aa0dade7e3505a7b2bd47b61f2b
-
SSDEEP
768:xX/BiLENuBX+bew632apcmiRd5j6cRDNyZ5kp23ka5kq7rIXS:9/UbX+q1TcnnRy7kpwzCqgXS
Malware Config
Extracted
mirai
LZRD
Signatures
-
Mirai family
-
Contacts a large (23760) amount of remote hosts 1 TTPs
This may indicate a network scan to discover remotely running services.
-
Creates a large amount of network flows 1 TTPs
This may indicate a network scan to discover remotely running services.
-
Modifies Watchdog functionality 1 TTPs 2 IoCs
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
description ioc File opened for modification /dev/watchdog File opened for modification /dev/misc/watchdog