Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    f81fc7600d7253cfa6594cdd1e45ee77.elf

  • Size

    151KB

  • Sample

    220913-hpsdeaagbl

  • MD5

    f81fc7600d7253cfa6594cdd1e45ee77

  • SHA1

    2fc8db45f81686382d17693b06e60c611ba12758

  • SHA256

    95d33a53bc03e42bf5cd6ff413799591a7f99bdee229105375e8d6726333f55f

  • SHA512

    1b4ddc1c5bc60bab31507bebf36139309963e31050ee3aea487d1c7efacebc2ceb9421d466730bb402d695be45d692e277247dede7c472a1d5e477f3913842df

  • SSDEEP

    3072:JW6dm9tS1aRGQdK76t/zCuI5mrThPaLEnvPrNb:c6IG+LC/mrThPaLEnvPrNb

Score
10/10

Malware Config

Targets

    • Target

      f81fc7600d7253cfa6594cdd1e45ee77.elf

    • Size

      151KB

    • MD5

      f81fc7600d7253cfa6594cdd1e45ee77

    • SHA1

      2fc8db45f81686382d17693b06e60c611ba12758

    • SHA256

      95d33a53bc03e42bf5cd6ff413799591a7f99bdee229105375e8d6726333f55f

    • SHA512

      1b4ddc1c5bc60bab31507bebf36139309963e31050ee3aea487d1c7efacebc2ceb9421d466730bb402d695be45d692e277247dede7c472a1d5e477f3913842df

    • SSDEEP

      3072:JW6dm9tS1aRGQdK76t/zCuI5mrThPaLEnvPrNb:c6IG+LC/mrThPaLEnvPrNb

    Score
    9/10
    • Modifies the Watchdog daemon

      Malware like Mirai modify the Watchdog to prevent it restarting an infected system.

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    • Reads system network configuration

      Uses contents of /proc filesystem to enumerate network settings.

MITRE ATT&CK Enterprise v6

Tasks