Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    131s
  • max time network
    150s
  • platform
    ubuntu-22.04_amd64
  • resource
    ubuntu2204-amd64-20250307-en
  • resource tags

    arch:amd64arch:i386image:ubuntu2204-amd64-20250307-enkernel:5.15.0-105-genericlocale:en-usos:ubuntu-22.04-amd64system
  • submitted
    11/03/2025, 01:22

General

  • Target

    morte.x64.elf

  • Size

    45KB

  • MD5

    01bf0be13ffc53125666643a4b2d3a03

  • SHA1

    f17ce9a88ae7376d8877a5db5c791bdb7f902307

  • SHA256

    736f97352b86346a6ef5d87ecee3e433db343b1fa8d1b786eaba71083d9c838a

  • SHA512

    0155f65cb5d8ea9df2768cce7cfa9cd3e9749070d8511e9999ebe37cc6741b8b89fe89b78c660d519f15de711f45f81e4d4ab5f0635fa5d07c0abdfcc451d48d

  • SSDEEP

    768:wQp2AnlD4SDLNRvcnh/t2HWV5SUiPpAez1eW8fssqp0d/jpJArzOLxAugDQg20eh:wO2KlD4WLUh/GOSUiRrMfssqar4eCuZt

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Signatures

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

  • Mirai family
  • Modifies Watchdog functionality 1 TTPs 2 IoCs

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

Processes

  • /tmp/morte.x64.elf
    /tmp/morte.x64.elf
    1⤵
    • Modifies Watchdog functionality
    PID:1560

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads