Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    587f0558b4ee34a843045ac64d98a74b

  • Size

    147KB

  • Sample

    230216-x2dhcabd22

  • MD5

    587f0558b4ee34a843045ac64d98a74b

  • SHA1

    0bb45eed36e8af790ebb424b1bb465887a57e2c4

  • SHA256

    ef22c074a9807d18bb790b7f42f36ae6a361195d218bc93afe1a88b2f31c9f66

  • SHA512

    2a3d3fe6a8c6dce3a607df1ed8c117ad1e32ce12a80273b6443d6b3288cc5f9d4e32c827136f792720470d90368a2e03be52e14007a4445c3594650573140ba8

  • SSDEEP

    3072:CJLce3pC5mT7naLHbz4N9GUJURIJ1FVEXkkTM/9oIMY:CJLcePnaLHbz4NMUJdHVEXkYM/9LMY

Score
10/10

Malware Config

Extracted

Family

mirai

C2

j.xnyidc.top

Targets

    • Target

      587f0558b4ee34a843045ac64d98a74b

    • Size

      147KB

    • MD5

      587f0558b4ee34a843045ac64d98a74b

    • SHA1

      0bb45eed36e8af790ebb424b1bb465887a57e2c4

    • SHA256

      ef22c074a9807d18bb790b7f42f36ae6a361195d218bc93afe1a88b2f31c9f66

    • SHA512

      2a3d3fe6a8c6dce3a607df1ed8c117ad1e32ce12a80273b6443d6b3288cc5f9d4e32c827136f792720470d90368a2e03be52e14007a4445c3594650573140ba8

    • SSDEEP

      3072:CJLce3pC5mT7naLHbz4N9GUJURIJ1FVEXkkTM/9oIMY:CJLcePnaLHbz4NMUJdHVEXkYM/9LMY

    Score
    9/10
    • Contacts a large (35825) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Reads runtime system information

      Reads data from /proc virtual filesystem.

MITRE ATT&CK Enterprise v6

Tasks