Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    149s
  • max time network
    153s
  • platform
    ubuntu-22.04_amd64
  • resource
    ubuntu2204-amd64-20240611-en
  • resource tags

    arch:amd64arch:i386image:ubuntu2204-amd64-20240611-enkernel:5.15.0-105-genericlocale:en-usos:ubuntu-22.04-amd64system
  • submitted
    07/03/2025, 00:32

General

  • Target

    morte.x86.elf

  • Size

    35KB

  • MD5

    c3ab76f0ae33671f000479ea96c20623

  • SHA1

    86bad9affe399e4203af9b3af245b26f6e99a644

  • SHA256

    5429b6c53444238c6b022fda5814edb7b4f93649fc5cd20c3faa01ee688ed9de

  • SHA512

    8dc92843d5f942817ebe290a114ef54b5acb282dce8c43e9913c10b5b03711fe555b8e260a5bc77b25a6a27998bb8759f3282aa0dade7e3505a7b2bd47b61f2b

  • SSDEEP

    768:xX/BiLENuBX+bew632apcmiRd5j6cRDNyZ5kp23ka5kq7rIXS:9/UbX+q1TcnnRy7kpwzCqgXS

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Signatures

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

  • Mirai family
  • Contacts a large (23760) amount of remote hosts 1 TTPs

    This may indicate a network scan to discover remotely running services.

  • Creates a large amount of network flows 1 TTPs

    This may indicate a network scan to discover remotely running services.

  • Modifies Watchdog functionality 1 TTPs 2 IoCs

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads