Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    352-1-0x00008000-0x00026464-memory.dmp

  • Size

    76KB

  • Sample

    230819-q8qmxsca2s

  • MD5

    ef894449175b826e1bd6f5716e8d459b

  • SHA1

    a1705db7a57aa70bef3eb150195936505023a331

  • SHA256

    90ed43cb2462f1bf84496deae6eaf61fa39ad186682a54b0b95d65495e2e0436

  • SHA512

    231c5466dd9e23b87601aa2387815d5583fca822d9836f611a2caf3079e0cba7dcc63498a5797bbea1eb406c905056408396153149c3d8e3be3fe3665a32e2d6

  • SSDEEP

    1536:TJnF9sFw8gu6+wyKaw1KpIPrbvr/6Ra1styKtI8ll5BihwlTQP+8oo:RowpuQyNSG2eRa1styK9flTQPHo

Score
10/10

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      352-1-0x00008000-0x00026464-memory.dmp

    • Size

      76KB

    • MD5

      ef894449175b826e1bd6f5716e8d459b

    • SHA1

      a1705db7a57aa70bef3eb150195936505023a331

    • SHA256

      90ed43cb2462f1bf84496deae6eaf61fa39ad186682a54b0b95d65495e2e0436

    • SHA512

      231c5466dd9e23b87601aa2387815d5583fca822d9836f611a2caf3079e0cba7dcc63498a5797bbea1eb406c905056408396153149c3d8e3be3fe3665a32e2d6

    • SSDEEP

      1536:TJnF9sFw8gu6+wyKaw1KpIPrbvr/6Ra1styKtI8ll5BihwlTQP+8oo:RowpuQyNSG2eRa1styK9flTQPHo

    Score
    7/10
    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks