Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
149s -
max time network
150s -
platform
ubuntu-18.04_amd64 -
resource
ubuntu1804-amd64-20240729-en -
resource tags
-
submitted
07/03/2025, 02:29
General
-
Target
morte.x86-20250307-0225.elf
-
Size
37KB
-
MD5
352f85fce51be0b59e66b2648c6e2404
-
SHA1
a5f4690c2be38f731cc92e956d55929860920f2b
-
SHA256
90703dfb40886ec14c46aea2f6a54c48558f6137e87f5cf971925ff25c7ea670
-
SHA512
35d6880083e8f9f0d44afe8d95c889d8c118e1458d5bd62d35d997c57543e92895a2b57075bf3ec21fe34c3d5dff361962a8a10ddb1eb0dfb935afef730751aa
-
SSDEEP
768:v8wWKhccMxQ8xSeIenWL/r+xf6LShXlsRDFf6A2WHyrr5eff7LZdWgpZ:uK49xVWL6RX4gDWHs56/WaZ
Malware Config
Extracted
mirai
LZRD
Signatures
-
Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
-
Mirai family
-
Contacts a large (23923) amount of remote hosts 1 TTPs
This may indicate a network scan to discover remotely running services.
-
Creates a large amount of network flows 1 TTPs
This may indicate a network scan to discover remotely running services.
-
Modifies Watchdog functionality 1 TTPs 2 IoCs
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Unexpected DNS network traffic destination 1 IoCs
Network traffic to other servers than the configured DNS servers was detected on the DNS port.