Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    0s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20240611-en
  • resource tags

    arch:armhfimage:debian9-armhf-20240611-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    11/03/2025, 01:17

General

  • Target

    morte.arm6.elf

  • Size

    48KB

  • MD5

    a388576c7dadc773290582db884cf92b

  • SHA1

    9ccd04b56581ba6e957ca8153d53fc9cc7444051

  • SHA256

    c3b210212bbf7aa4032bc1b2fae8ca154f8bb08b3ddf44d7c221e25b6b6cb5bf

  • SHA512

    1d8e5355031f3bc210f3431f9507bb67eaf5de108ff3cb861e5e1bcb5ce5ef06ecf9825a6345062f02b1bc47033b6603ac01791a18d4050d030577ef0bb794b4

  • SSDEEP

    1536:Zl+k6WcYkpS3MARjoJoukPGfN4NNFwi4gp8NL0:7+0cYkpS3Fj3G1c+i4gYL0

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Signatures

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

  • Mirai family
  • Reads runtime system information 1 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • /tmp/morte.arm6.elf
    /tmp/morte.arm6.elf
    1⤵
    • Reads runtime system information
    PID:646

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads