Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    916713f6a931d88d4b91b468081aadfa

  • Size

    1.2MB

  • Sample

    231220-js2lxsdfa4

  • MD5

    916713f6a931d88d4b91b468081aadfa

  • SHA1

    27e4c878a87bc6b9fdca08d785d7ebde1d80f963

  • SHA256

    0468ba5c627dee9f0056f13c5bc2fa82e11f386dcfdfeab1c00412f5dfa2655c

  • SHA512

    8a792e70827864160bc7fe01d31544f8179376e4d3cf410d53dc3baed14e6947c629c891af02d8cf67b5a85a99fbd6efc419c4027596f2504d005a3ec39a9e49

  • SSDEEP

    24576:e845rGHu6gVJKG75oFpA0VWeX452y1q2rJp0:745vRVJKGtSA0VWeogu9p0

Malware Config

Targets

    • Target

      916713f6a931d88d4b91b468081aadfa

    • Size

      1.2MB

    • MD5

      916713f6a931d88d4b91b468081aadfa

    • SHA1

      27e4c878a87bc6b9fdca08d785d7ebde1d80f963

    • SHA256

      0468ba5c627dee9f0056f13c5bc2fa82e11f386dcfdfeab1c00412f5dfa2655c

    • SHA512

      8a792e70827864160bc7fe01d31544f8179376e4d3cf410d53dc3baed14e6947c629c891af02d8cf67b5a85a99fbd6efc419c4027596f2504d005a3ec39a9e49

    • SSDEEP

      24576:e845rGHu6gVJKG75oFpA0VWeX452y1q2rJp0:745vRVJKGtSA0VWeogu9p0

    • MrBlack Trojan

      IoT botnet which infects routers to be used for DDoS attacks.

    • MrBlack trojan

    • Executes dropped EXE

    • Checks CPU configuration

      Checks CPU information which indicate if the system is a virtual machine.

    • Modifies init.d

      Adds/modifies system service, likely for persistence.

    • Write file to user bin folder

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks