Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    996d68a1ec3b4ff92e1558bbd4823a518b170804567a6570af03f70ce5070a04.elf

  • Size

    188KB

  • Sample

    240213-dzsdyahd72

  • MD5

    26c71968d646224aed35eaa52fda793e

  • SHA1

    f10e08ea949e925505ab747887ad7a8d93ef39fa

  • SHA256

    996d68a1ec3b4ff92e1558bbd4823a518b170804567a6570af03f70ce5070a04

  • SHA512

    b8c701eaace19b0a98eaa5318131371872e81469f34e5d1b8969da8595bcde067998bf52f96a5412734974f99d4f984d0de4234f5a5e94b6f5edf3536d7cec7e

  • SSDEEP

    3072:L8nEdLu4Bsb8fUIdaiuqu0wSsPAsQBMRrH30NrcogM/Rke:gnkZsbindaiuqu0wpqBArH3urhgM/Rke

Score
10/10

Malware Config

Extracted

Family

mirai

C2

haha.skyljne.click

Targets

    • Target

      996d68a1ec3b4ff92e1558bbd4823a518b170804567a6570af03f70ce5070a04.elf

    • Size

      188KB

    • MD5

      26c71968d646224aed35eaa52fda793e

    • SHA1

      f10e08ea949e925505ab747887ad7a8d93ef39fa

    • SHA256

      996d68a1ec3b4ff92e1558bbd4823a518b170804567a6570af03f70ce5070a04

    • SHA512

      b8c701eaace19b0a98eaa5318131371872e81469f34e5d1b8969da8595bcde067998bf52f96a5412734974f99d4f984d0de4234f5a5e94b6f5edf3536d7cec7e

    • SSDEEP

      3072:L8nEdLu4Bsb8fUIdaiuqu0wSsPAsQBMRrH30NrcogM/Rke:gnkZsbindaiuqu0wpqBArH3urhgM/Rke

    Score
    9/10
    • Contacts a large (62029) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Changes its process name

    • Enumerates running processes

      Discovers information about currently running processes on the system

MITRE ATT&CK Enterprise v15

Tasks