Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    3d19de117388d50e5685d203683c2045881a92646c69ee6d4b99a71bf65dafa7.elf

  • Size

    58KB

  • Sample

    240213-ddwt8sda2x

  • MD5

    58c5fe2b0d7da7ab08d0d457a89520fd

  • SHA1

    8ded684340a0e6de4d7fe7db4a89f7d29a3ca839

  • SHA256

    3d19de117388d50e5685d203683c2045881a92646c69ee6d4b99a71bf65dafa7

  • SHA512

    4e6c5d4dc021d63c0f9f821a17cd41c53903132fd167bb7a10d9f363714e42862164eb6feb5684d9179d889793344ed157948e9bd9a604523d346b462114c6e5

  • SSDEEP

    1536:/tcML1rgs1BeGYeEzCt9jHaL9NakbUl8No:FxrZ4GYeQq9raL9IyUl8a

Malware Config

Extracted

Family

mirai

Botnet

MIRAI

Targets

    • Target

      3d19de117388d50e5685d203683c2045881a92646c69ee6d4b99a71bf65dafa7.elf

    • Size

      58KB

    • MD5

      58c5fe2b0d7da7ab08d0d457a89520fd

    • SHA1

      8ded684340a0e6de4d7fe7db4a89f7d29a3ca839

    • SHA256

      3d19de117388d50e5685d203683c2045881a92646c69ee6d4b99a71bf65dafa7

    • SHA512

      4e6c5d4dc021d63c0f9f821a17cd41c53903132fd167bb7a10d9f363714e42862164eb6feb5684d9179d889793344ed157948e9bd9a604523d346b462114c6e5

    • SSDEEP

      1536:/tcML1rgs1BeGYeEzCt9jHaL9NakbUl8No:FxrZ4GYeQq9raL9IyUl8a

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Contacts a large (61925) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Changes its process name

    • Deletes itself

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

MITRE ATT&CK Enterprise v15

Tasks