Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    0172b45249c955ea8c1b201b44f84249944729240d8b7682e5d8e98246ea27fe.zip

  • Size

    71KB

  • Sample

    230308-ptfczafg8y

  • MD5

    6b359caecec408b611ae97fe60673e30

  • SHA1

    f1549ffa9c3952caa116375c9a6f2aca3dcbafbc

  • SHA256

    f88e99209435f940b4e1b039cabdeec508017908275137f193c784cf0d29e4c9

  • SHA512

    d30be4b5ebd87fdd9a4690439eed2bab80a50ae80481df18cf2f5d1f9ae6b0f72d6898693137ef930ed35a8dfc1d4c77ccb7eb4feb1df050261c1d73a0a906e3

  • SSDEEP

    1536:00JwadeJRbJ30Ah5Eg/NSZVJDl9dROTk/xMwIfb7eSCHO4Md3KJfX:zwaUJn0kCrOY6TEujRKF

Score
10/10

Malware Config

Extracted

Family

mirai

C2

cnc.cattostresser.com

Targets

    • Target

      0172b45249c955ea8c1b201b44f84249944729240d8b7682e5d8e98246ea27fe.elf

    • Size

      158KB

    • MD5

      7940b47f142572132e726897adac0432

    • SHA1

      af48cd3ee154f36c6a88dccd2680e268e7534418

    • SHA256

      0172b45249c955ea8c1b201b44f84249944729240d8b7682e5d8e98246ea27fe

    • SHA512

      bbb01a3c30cf30fc6d490c38dadfb0926cf24f3ba557a24c93ed78b235fcd55e5c01932577d16c6dc9d9737a48f67bd3090f9396d1d791c89613b3c536348089

    • SSDEEP

      3072:2GMavKqPtHGHAGhYaIrIomY90AoTthWZLptbAu2LUM/93okPZf7:2GMSKqPXEYaMIomY90BTtsfbAu2wM/9b

    Score
    9/10
    • Contacts a large (35573) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Reads runtime system information

      Reads data from /proc virtual filesystem.

MITRE ATT&CK Enterprise v6

Tasks