Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    b51fa81a6fa97c91063e4094fffe8735.bin

  • Size

    32KB

  • Sample

    231010-cjacrahh9s

  • MD5

    3ae744519380c3f5e0b62fda10fb2f9c

  • SHA1

    a92b3fc21f340a7cc91710fe2abf8328e09610c7

  • SHA256

    e1a5f856dbf315a39f069aa02e48c2afa7fbd6c850aa21b5ca0c4835ebf7b581

  • SHA512

    26ff17f711c0c3d4670f7dd5f66637525350eb8c470e400c4ca3601eb7bd053b02c4cde65586128f5de254bbba581f126646f0c55663e57990f19a9e4145983e

  • SSDEEP

    768:7DE+4G/g9+j1t9b41SaZQlMKXVtrky0QtfGc/1XOCk+FaS4NMhIN/:79t1t9bKjctTJ/1XOCbx4aSN

Score
10/10

Malware Config

Extracted

Family

mirai

C2

wxd5cxqklilifh0m4pv8tg.dekma-gay.ru

Targets

    • Target

      a057e02759c8a87a3310012cfa5c950a13a8954eeefdc8f5ed148ddfd6369521.elf

    • Size

      62KB

    • MD5

      b51fa81a6fa97c91063e4094fffe8735

    • SHA1

      ffa1267e82ed5ec8663be0a3ea1b4f638a73b814

    • SHA256

      a057e02759c8a87a3310012cfa5c950a13a8954eeefdc8f5ed148ddfd6369521

    • SHA512

      8a76d59635afda238ea14b844155654c8f720e98ae87872b1ed6e79b833e77f89b64aaf4474b1a08dfe6657bcd9534772d5b21b11839ca05bd3c078ac32d7e60

    • SSDEEP

      1536:V5Vn4pXoqVExGxRP3MFnKiwjGKO18HKaPW+uSUnDJEAG9M:7R4pxuxGxB3MFnKrGHCHK6N+NK

    Score
    9/10
    • Contacts a large (24313) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Changes its process name

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

MITRE ATT&CK Enterprise v15

Tasks