Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
150s -
max time network
153s -
platform
debian-9_mipsel -
resource
debian9-mipsel-20240226-en -
resource tags
-
submitted
07/03/2025, 04:50
General
-
Target
68dddc312cd7d0743877f35103aad42e821fa0ab41cd3db1df05f4236eedd747.elf
-
Size
51KB
-
MD5
3889c3f36b4f6aed4948532f53a3b973
-
SHA1
3174dd375921f3b5192f5171c4d9a4d78c74c14a
-
SHA256
68dddc312cd7d0743877f35103aad42e821fa0ab41cd3db1df05f4236eedd747
-
SHA512
05851221f4eed17d069e67886aa67f151a9f9d06e2f17409b78ed3f7f450967ab441903228d0da8585038a71e2e9344adc6124689bc7952127c3b82dfccbf5cc
-
SSDEEP
1536:pL8gWi65+z9CS3/vudtf9MJnAgjc2ZFJyBAAUby:N8gWi6U5+dtlMnAgjc2ZbyBtB
Malware Config
Signatures
-
Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
-
Mirai family
-
Contacts a large (22795) amount of remote hosts 1 TTPs
This may indicate a network scan to discover remotely running services.
-
Creates a large amount of network flows 1 TTPs
This may indicate a network scan to discover remotely running services.
-
Modifies Watchdog functionality 1 TTPs 2 IoCs
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
Processes
-
/tmp/68dddc312cd7d0743877f35103aad42e821fa0ab41cd3db1df05f4236eedd747.elf/tmp/68dddc312cd7d0743877f35103aad42e821fa0ab41cd3db1df05f4236eedd747.elf1⤵
- Modifies Watchdog functionality