Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

5

morte.x64-...26.elf

ubuntu-24.04-amd64

10

Analysis

  • max time kernel
    74s
  • max time network
    155s
  • platform
    ubuntu-24.04_amd64
  • resource
    ubuntu2404-amd64-20240523-en
  • resource tags

    arch:amd64arch:i386image:ubuntu2404-amd64-20240523-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system
  • submitted
    07/03/2025, 02:27

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    morte.x64-20250307-0226.elf

  • Size

    50KB

  • MD5

    59b173c85153381d64435871845a41cf

  • SHA1

    9b276c7cfd660d7546f8c9d1394012511f72d713

  • SHA256

    2f2d3f1980929b0a2b8656563c68e0a96559c6ef8f5d3c8337cae704b2b6fc3b

  • SHA512

    06fa36b3adb340a5a511731754ef95a6f7922a8c7c69144326c9b0e42f01bb334d356064794a1edd291728b544f2f74f6ed0de86f2c75517537f9ed9ca6465a0

  • SSDEEP

    1536:l1sqfvYXEgf3hpfnRbfBI4Uc1qtKk0wSarmjt6:/hoUAnRbpI/c3kb9656

Score
10/10
mirailzrdbotnetdefense_evasiondiscovery

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Signatures

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai
  • Mirai family
    mirai
  • Contacts a large (23601) amount of remote hosts 1 TTPs

    This may indicate a network scan to discover remotely running services.

    discovery
  • Creates a large amount of network flows 1 TTPs

    This may indicate a network scan to discover remotely running services.

    discovery
  • Modifies Watchdog functionality 1 TTPs 2 IoCs

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

Processes

  • /tmp/morte.x64-20250307-0226.elf
    /tmp/morte.x64-20250307-0226.elf
    1⤵
    • Modifies Watchdog functionality
    PID:2817

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads