Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    ce05a237de19a0dda5891ee4d8fc80e1.elf

  • Size

    37KB

  • Sample

    221106-m7ebqagga8

  • MD5

    ce05a237de19a0dda5891ee4d8fc80e1

  • SHA1

    514b91292f2aa6e421603b9fc3b11b4491e62ffc

  • SHA256

    5014ee8c9b5f198e1682e9650043a65258f3bcef4daf6d7f7f305ea130ca09e4

  • SHA512

    a392cc3fbcb7bf75202478dcab8548bff8d8352dfcd052530604cb30b11d0d9875e1c3d71763a85b2e86012de3c9f7c38ab7a06cef6f9622b297b17ac3ea8a4c

  • SSDEEP

    768:eJr8JdEdURFm7bgUl0/tUE00VXahMn42mLMshSYknc1YWB9:eZ8JDb+bdCtM2Xw7pLL/kaH9

Score
9/10

Malware Config

Targets

    • Target

      ce05a237de19a0dda5891ee4d8fc80e1.elf

    • Size

      37KB

    • MD5

      ce05a237de19a0dda5891ee4d8fc80e1

    • SHA1

      514b91292f2aa6e421603b9fc3b11b4491e62ffc

    • SHA256

      5014ee8c9b5f198e1682e9650043a65258f3bcef4daf6d7f7f305ea130ca09e4

    • SHA512

      a392cc3fbcb7bf75202478dcab8548bff8d8352dfcd052530604cb30b11d0d9875e1c3d71763a85b2e86012de3c9f7c38ab7a06cef6f9622b297b17ac3ea8a4c

    • SSDEEP

      768:eJr8JdEdURFm7bgUl0/tUE00VXahMn42mLMshSYknc1YWB9:eZ8JDb+bdCtM2Xw7pLL/kaH9

    Score
    9/10
    • Contacts a large (36154) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Modifies the Watchdog daemon

      Malware like Mirai modify the Watchdog to prevent it restarting an infected system.

    • Reads runtime system information

      Reads data from /proc virtual filesystem.

    • Writes file to tmp directory

      Malware often drops required files in the /tmp directory.

MITRE ATT&CK Enterprise v6

Tasks