Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    1c210c43e321da9ce287fc76dd9b7ca4881fd5461d43b080a1035b0696d60f1b.elf

  • Size

    98KB

  • Sample

    240213-c73dfadd89

  • MD5

    b99ab401164741dc3f2f6ff197aedb9a

  • SHA1

    99fcd473660c0a7b4d26909306830d8fc1c53c58

  • SHA256

    1c210c43e321da9ce287fc76dd9b7ca4881fd5461d43b080a1035b0696d60f1b

  • SHA512

    5b435de665ff5ccd09010a432e2f1b64319b931af6e7add8f8bd0236762888f3bd6f1abd59710e4c2208adc4284634f6c6678c6218acd6615b8381332642f09e

  • SSDEEP

    1536:BIQyv/zvY4NKtk9KKix+3yVPdfAXOmw4SYnanbO3SfYZI4xoks8:2Qyv/zvY4OkUKix+3YP4Omd/nUaCfO0

Score
10/10

Malware Config

Extracted

Family

mirai

C2

haha.skyljne.click

Targets

    • Target

      1c210c43e321da9ce287fc76dd9b7ca4881fd5461d43b080a1035b0696d60f1b.elf

    • Size

      98KB

    • MD5

      b99ab401164741dc3f2f6ff197aedb9a

    • SHA1

      99fcd473660c0a7b4d26909306830d8fc1c53c58

    • SHA256

      1c210c43e321da9ce287fc76dd9b7ca4881fd5461d43b080a1035b0696d60f1b

    • SHA512

      5b435de665ff5ccd09010a432e2f1b64319b931af6e7add8f8bd0236762888f3bd6f1abd59710e4c2208adc4284634f6c6678c6218acd6615b8381332642f09e

    • SSDEEP

      1536:BIQyv/zvY4NKtk9KKix+3yVPdfAXOmw4SYnanbO3SfYZI4xoks8:2Qyv/zvY4OkUKix+3YP4Omd/nUaCfO0

    Score
    9/10
    • Contacts a large (84070) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Changes its process name

    • Enumerates running processes

      Discovers information about currently running processes on the system

MITRE ATT&CK Enterprise v15

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.