Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
146s -
max time network
150s -
platform
ubuntu-22.04_amd64 -
resource
ubuntu2204-amd64-20250307-en -
resource tags
arch:amd64arch:i386image:ubuntu2204-amd64-20250307-enkernel:5.15.0-105-genericlocale:en-usos:ubuntu-22.04-amd64system -
submitted
16/03/2025, 11:07
Behavioral task
behavioral1
Sample
EdiAf.x86.elf
Resource
ubuntu2204-amd64-20250307-en
7 signatures
150 seconds
General
-
Target
EdiAf.x86.elf
-
Size
30KB
-
MD5
a1ad9bc913b861f4edc64291cd344c11
-
SHA1
c30038c375f5836979770e94c3ddffd9aeb7239a
-
SHA256
1e3cbc28cfd86429f7715bede5578f81aecc1656b4d52688ee132413c28b269f
-
SHA512
08b7f6bb1120df3b0b519c6f4c965bddf19b2cc0fb833e84f3fe5cd206af808ddc6b5e05df4493e7c2b688d6497d4893b78e77b5cc7505809a5120e57f491aab
-
SSDEEP
768:65Ox64mumNhAbib/NbX0lieYz6p8ojLu3VwtgEs+tFKP:6EQ4mumXjhtHGfy3ytv/jk
Score
10/10
Malware Config
Extracted
Family
mirai
Botnet
UNSTABLE
C2
server1988.ignorelist.com
Signatures
-
Mirai family
-
Deletes itself 1 IoCs
pid 1569 -
Modifies Watchdog functionality 1 TTPs 2 IoCs
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
description ioc File opened for modification /dev/watchdog File opened for modification /dev/misc/watchdog -
Writes file to system bin folder 2 IoCs
description ioc File opened for modification /sbin/watchdog File opened for modification /bin/watchdog -
Changes its process name 1 IoCs
description pid Changes the process name, possibly in an attempt to hide itself 1569 -
description ioc File opened for reading /proc/self/exe File opened for reading /proc/self/maps