Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

5

bfcd6fb5fe...4a.elf

debian-12-armhf

10

Analysis

  • max time kernel
    0s
  • max time network
    159s
  • platform
    debian-12_armhf
  • resource
    debian12-armhf-20240221-en
  • resource tags

    arch:armhfimage:debian12-armhf-20240221-enkernel:6.1.0-17-armmp-lpaelocale:en-usos:debian-12-armhfsystem
  • submitted
    17/03/2025, 03:41

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    bfcd6fb5fe8e5e3ba9c6bc52d66c2db31524e822372f4300948c3cf82a790d4a.elf

  • Size

    36KB

  • MD5

    41a13483b977be832bc9494784a19439

  • SHA1

    99b9250ec02cd40bfb6ce0903a0473f0222a281c

  • SHA256

    bfcd6fb5fe8e5e3ba9c6bc52d66c2db31524e822372f4300948c3cf82a790d4a

  • SHA512

    3b56f8e7672e103a1c44d408a5a0ed87c9050059c62b64f7926cba336f21afe8dad41b0df40c5eb511d2294355062a440d1a9d78c3b69c8491d17270b0bc34e0

  • SSDEEP

    768:fr0bT76oPrZvNXkmXCDBHMuZwSfNYJE0hxtL3Ym8Aq3UIHC:QH/nVXsHtRfNKHRL3gi

Score
10/10
miraiunstablebotnetdiscovery

Malware Config

Extracted

Family

mirai

Botnet

UNSTABLE

Signatures

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai
  • Mirai family
    mirai
  • Reads runtime system information 1 IoCs

    Reads data from /proc virtual filesystem.

    discovery

Processes

  • /tmp/bfcd6fb5fe8e5e3ba9c6bc52d66c2db31524e822372f4300948c3cf82a790d4a.elf
    /tmp/bfcd6fb5fe8e5e3ba9c6bc52d66c2db31524e822372f4300948c3cf82a790d4a.elf
    1⤵
    • Reads runtime system information
    PID:709

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads