Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    48cd7492ee4b71bc4203dc06c6ed5e9b452fdee662ce21e6633ff07d4255fa72.elf

  • Size

    33KB

  • Sample

    240212-cwq62agd9z

  • MD5

    7604f9ccf0e615206f77f7438646c31d

  • SHA1

    a60064e5bb7906a1ff70882d8465b23ccf76552b

  • SHA256

    48cd7492ee4b71bc4203dc06c6ed5e9b452fdee662ce21e6633ff07d4255fa72

  • SHA512

    46449ad2faf3231a92fa0172d2a6eb9e79acc236691e8b9748e540dfcd98e6faeda7a2468f349707a5317deec0be9520cce9d4a126f85e456060e0f2ff54c0a7

  • SSDEEP

    768:t/AX49kYDJ9GPnoAr9ttMW4UwTK/8nVxr1xQdTIVRR7o3UC:GPno+CWcjn31xImRR7Y

Malware Config

Extracted

Family

mirai

C2

scan.rebirthltd.top

Targets

    • Target

      48cd7492ee4b71bc4203dc06c6ed5e9b452fdee662ce21e6633ff07d4255fa72.elf

    • Size

      33KB

    • MD5

      7604f9ccf0e615206f77f7438646c31d

    • SHA1

      a60064e5bb7906a1ff70882d8465b23ccf76552b

    • SHA256

      48cd7492ee4b71bc4203dc06c6ed5e9b452fdee662ce21e6633ff07d4255fa72

    • SHA512

      46449ad2faf3231a92fa0172d2a6eb9e79acc236691e8b9748e540dfcd98e6faeda7a2468f349707a5317deec0be9520cce9d4a126f85e456060e0f2ff54c0a7

    • SSDEEP

      768:t/AX49kYDJ9GPnoAr9ttMW4UwTK/8nVxr1xQdTIVRR7o3UC:GPno+CWcjn31xImRR7Y

    Score
    10/10
    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Contacts a large (76670) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Changes its process name

    • Deletes itself

MITRE ATT&CK Enterprise v15

Tasks