Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
cf1810414f8bad05d621321880c8ad35.bin
-
Size
28KB
-
Sample
230306-b95qxaac29
-
MD5
373883dacd4763a1353f3a35f031a340
-
SHA1
309226c77b7a68742ce85bd0f2d2845283da33f7
-
SHA256
8fe1753a49ebb98767fa1c7b773221ee23ce99b746669d8055d2aefe63ddc2f3
-
SHA512
a404f8af5358b7fb5088773bcafd016a545ba449edf5be5272a5c3ece0bf7fcfddbf6e1468ac745e77d4a77335e63d723aeabded567dfaffd5f2db30f0a381f5
-
SSDEEP
384:bjJDa3DqWTrgihKUy11k63RqnDlRXty17ZA04ULYCZeubLqUlYHF9rFE20RgPZ:/JDazh/LEtTBwtwZAXNkLqpFkA
Behavioral task
behavioral1
Sample
b55cf50228e7edd1f4deee01d3303d1e41bdf02a3cde44a950dfed77f393c30a.elf
Resource
debian9-mipsel-en-20211208
Malware Config
Extracted
mirai
BOTNET
Targets
-
-
Target
b55cf50228e7edd1f4deee01d3303d1e41bdf02a3cde44a950dfed77f393c30a.elf
-
Size
67KB
-
MD5
cf1810414f8bad05d621321880c8ad35
-
SHA1
976a10aa92d1c0e1175cc6b81ecf71c49ffe9dd3
-
SHA256
b55cf50228e7edd1f4deee01d3303d1e41bdf02a3cde44a950dfed77f393c30a
-
SHA512
e511e3427b14c28a939e781a7e89680c3e09d04e2e454b64278b26c1b98ff85b7b26ca0ccf69ee6f7753f3bb71b25910852cc1953e97bc5f8898608c6a43fbdd
-
SSDEEP
1536:s5KqO60Cg3XkLB3ILvTdt38K8ZweT4Qg:sYqO60CgH98/B
Score9/10-
Contacts a large (113097) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Modifies the Watchdog daemon
Malware like Mirai modify the Watchdog to prevent it restarting an infected system.
-
Reads runtime system information
Reads data from /proc virtual filesystem.
-