Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    cf1810414f8bad05d621321880c8ad35.bin

  • Size

    28KB

  • Sample

    230306-b95qxaac29

  • MD5

    373883dacd4763a1353f3a35f031a340

  • SHA1

    309226c77b7a68742ce85bd0f2d2845283da33f7

  • SHA256

    8fe1753a49ebb98767fa1c7b773221ee23ce99b746669d8055d2aefe63ddc2f3

  • SHA512

    a404f8af5358b7fb5088773bcafd016a545ba449edf5be5272a5c3ece0bf7fcfddbf6e1468ac745e77d4a77335e63d723aeabded567dfaffd5f2db30f0a381f5

  • SSDEEP

    384:bjJDa3DqWTrgihKUy11k63RqnDlRXty17ZA04ULYCZeubLqUlYHF9rFE20RgPZ:/JDazh/LEtTBwtwZAXNkLqpFkA

Score
10/10

Malware Config

Extracted

Family

mirai

Botnet

BOTNET

Targets

    • Target

      b55cf50228e7edd1f4deee01d3303d1e41bdf02a3cde44a950dfed77f393c30a.elf

    • Size

      67KB

    • MD5

      cf1810414f8bad05d621321880c8ad35

    • SHA1

      976a10aa92d1c0e1175cc6b81ecf71c49ffe9dd3

    • SHA256

      b55cf50228e7edd1f4deee01d3303d1e41bdf02a3cde44a950dfed77f393c30a

    • SHA512

      e511e3427b14c28a939e781a7e89680c3e09d04e2e454b64278b26c1b98ff85b7b26ca0ccf69ee6f7753f3bb71b25910852cc1953e97bc5f8898608c6a43fbdd

    • SSDEEP

      1536:s5KqO60Cg3XkLB3ILvTdt38K8ZweT4Qg:sYqO60CgH98/B

    Score
    9/10
    • Contacts a large (113097) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Modifies the Watchdog daemon

      Malware like Mirai modify the Watchdog to prevent it restarting an infected system.

    • Reads runtime system information

      Reads data from /proc virtual filesystem.

MITRE ATT&CK Enterprise v6

Tasks