Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
151s -
max time network
145s -
platform
debian-12_mipsel -
resource
debian12-mipsel-20240221-en -
resource tags
arch:mipselimage:debian12-mipsel-20240221-enkernel:6.1.0-17-4kc-maltalocale:en-usos:debian-12-mipselsystem -
submitted
24/03/2025, 12:05
Behavioral task
behavioral1
Sample
eb1d3a18f78becd8d17cf358bae0c2fb98ffcc185197f3eeee9b14ef014de9f9.elf
Resource
debian12-mipsel-20240221-en
5 signatures
150 seconds
General
-
Target
eb1d3a18f78becd8d17cf358bae0c2fb98ffcc185197f3eeee9b14ef014de9f9.elf
-
Size
30KB
-
MD5
598a47dd02119cfb425220bae9350c91
-
SHA1
fc2855fd455afc55678b08b02d744b1563a0f7f3
-
SHA256
eb1d3a18f78becd8d17cf358bae0c2fb98ffcc185197f3eeee9b14ef014de9f9
-
SHA512
6a580e1a62078fca8929f5001891bf9a28369ba58742fd82bed80d2116fae831acf1aae24a58218f28b3912ec8db281f25c0ff760288b9480b5cc96da1fc5619
-
SSDEEP
768:SO5XJJiweA6zyjPrqvIhrzftx8xqqKZBvh5kdwCW9:S85JiwKzyfrzf388XZdh5LN
Score
10/10
Malware Config
Extracted
Family
mirai
Botnet
MIRAI
Signatures
-
Mirai family
-
Deletes itself 1 IoCs
pid Process 745 eb1d3a18f78becd8d17cf358bae0c2fb98ffcc185197f3eeee9b14ef014de9f9.elf -
Modifies Watchdog functionality 1 TTPs 2 IoCs
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
description ioc Process File opened for modification /dev/watchdog eb1d3a18f78becd8d17cf358bae0c2fb98ffcc185197f3eeee9b14ef014de9f9.elf File opened for modification /dev/misc/watchdog eb1d3a18f78becd8d17cf358bae0c2fb98ffcc185197f3eeee9b14ef014de9f9.elf -
Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself 0uu133p7c5jljiuu 745 eb1d3a18f78becd8d17cf358bae0c2fb98ffcc185197f3eeee9b14ef014de9f9.elf