Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    0s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20240418-en
  • resource tags

    arch:armhfimage:debian9-armhf-20240418-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    18/03/2025, 00:17

General

  • Target

    EdiAf.arm6.elf

  • Size

    36KB

  • MD5

    2156ea53158d76da636b665083b11daa

  • SHA1

    4d69fcb665e16ddc6ded0ecd30f154da1d6b9049

  • SHA256

    ba571a04e369f99fd876e9128978fd4d8cbd1d475616e05d57f85ef689c3a88a

  • SHA512

    f947cd953823b735d644a49dedad4f16d77000f5a538af20227ecc03611a3fdf1eefde1cc39e8575b4371f0afbf59cd4d2a67d57816fc19eb0e23809e0e57b69

  • SSDEEP

    768:fdxRdPAUGgLxjRaZcMMHGeV0WSVT2MjH+pbodFQmCdLfAxk57cvzEY+RJWq3UIDh:1TBAYVfvHDV0WGZibzF7c7IJ5d

Malware Config

Extracted

Family

mirai

Botnet

UNSTABLE

Signatures

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

  • Mirai family
  • Reads runtime system information 1 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • /tmp/EdiAf.arm6.elf
    /tmp/EdiAf.arm6.elf
    1⤵
    • Reads runtime system information
    PID:651

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads