Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
150s -
max time network
10s -
platform
debian-9_mips -
resource
debian9-mipsbe-20240611-en -
resource tags
arch:mipsimage:debian9-mipsbe-20240611-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem -
submitted
11/03/2025, 07:58
Behavioral task
behavioral1
Sample
boatnet.mips.elf
Resource
debian9-mipsbe-20240611-en
General
-
Target
boatnet.mips.elf
-
Size
23KB
-
MD5
40348efaba5f65bdd2df8eace4abee00
-
SHA1
2165844b5fa73bcbf5e149e21f5ade494246a89a
-
SHA256
3741aa7b52973aa89c17b455f5c64d13bab931d1214c8b049201d85ca023bcb5
-
SHA512
a0371a9ce2575968253cbe5a4f87d905480d1a7712c15f0e1e874190f7f94a5188c1155d8a73ca508a8011067f173b50d6b76d710936129dade47ce8964c9566
-
SSDEEP
384:neD8ZSH2LLZUYyGZbsOiTrowSN9rnZMINlphQ/HYtui856mdzJgGlzDpH7uNj1JZ:neD8ZSWvZHZbs1row697qohQvg9856i2
Malware Config
Extracted
mirai
LZRD
Signatures
-
Mirai family
-
Modifies Watchdog functionality 1 TTPs 2 IoCs
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
description ioc Process File opened for modification /dev/watchdog boatnet.mips.elf File opened for modification /dev/misc/watchdog boatnet.mips.elf -
Enumerates running processes
Discovers information about currently running processes on the system
-
Writes file to system bin folder 2 IoCs
description ioc Process File opened for modification /sbin/watchdog boatnet.mips.elf File opened for modification /bin/watchdog boatnet.mips.elf -
description ioc Process File opened for reading /proc/515/cmdline boatnet.mips.elf File opened for reading /proc/558/cmdline boatnet.mips.elf File opened for reading /proc/680/cmdline boatnet.mips.elf File opened for reading /proc/696/cmdline boatnet.mips.elf File opened for reading /proc/702/cmdline boatnet.mips.elf File opened for reading /proc/732/cmdline boatnet.mips.elf File opened for reading /proc/758/cmdline boatnet.mips.elf File opened for reading /proc/764/cmdline boatnet.mips.elf File opened for reading /proc/562/cmdline boatnet.mips.elf File opened for reading /proc/689/cmdline boatnet.mips.elf File opened for reading /proc/697/cmdline boatnet.mips.elf File opened for reading /proc/701/cmdline boatnet.mips.elf File opened for reading /proc/744/cmdline boatnet.mips.elf File opened for reading /proc/765/cmdline boatnet.mips.elf File opened for reading /proc/788/cmdline boatnet.mips.elf File opened for reading /proc/802/cmdline boatnet.mips.elf File opened for reading /proc/502/cmdline boatnet.mips.elf File opened for reading /proc/703/cmdline boatnet.mips.elf File opened for reading /proc/707/cmdline boatnet.mips.elf File opened for reading /proc/709/cmdline boatnet.mips.elf File opened for reading /proc/738/cmdline boatnet.mips.elf File opened for reading /proc/769/cmdline boatnet.mips.elf File opened for reading /proc/774/cmdline boatnet.mips.elf File opened for reading /proc/808/cmdline boatnet.mips.elf File opened for reading /proc/714/cmdline boatnet.mips.elf File opened for reading /proc/777/cmdline boatnet.mips.elf File opened for reading /proc/781/cmdline boatnet.mips.elf File opened for reading /proc/787/cmdline boatnet.mips.elf -
System Network Configuration Discovery 1 TTPs 1 IoCs
Adversaries may gather information about the network configuration of a system.
pid Process 704 boatnet.mips.elf