Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    a3c6935c6b06a033b760c6b53a5c81d1172976195a6659f15fbcda644f88015c.elf

  • Size

    53KB

  • Sample

    240316-c5zvjaaa8v

  • MD5

    f8edc93eefe0cbadc3ac809df85059bb

  • SHA1

    5e60f278bb69da9f2ffc7c6284ef2cee03235767

  • SHA256

    a3c6935c6b06a033b760c6b53a5c81d1172976195a6659f15fbcda644f88015c

  • SHA512

    636e12fe28a71e3f00da76f855340958c738c98c7897b21c9c9412b52379997c73caabac0aca940a53c269834d83efd0cf545bfa1ad22bdca7847e0f9dd41bb5

  • SSDEEP

    1536:Pt6QoiZt0F9AQRhaWe8aS2wxGGmHVAaRfSJ:Pt6Qomy9AQ/DaSHxy1PRg

Malware Config

Extracted

Family

mirai

Botnet

BOTNET

C2

zyzy.duckdns.org

Targets

    • Target

      a3c6935c6b06a033b760c6b53a5c81d1172976195a6659f15fbcda644f88015c.elf

    • Size

      53KB

    • MD5

      f8edc93eefe0cbadc3ac809df85059bb

    • SHA1

      5e60f278bb69da9f2ffc7c6284ef2cee03235767

    • SHA256

      a3c6935c6b06a033b760c6b53a5c81d1172976195a6659f15fbcda644f88015c

    • SHA512

      636e12fe28a71e3f00da76f855340958c738c98c7897b21c9c9412b52379997c73caabac0aca940a53c269834d83efd0cf545bfa1ad22bdca7847e0f9dd41bb5

    • SSDEEP

      1536:Pt6QoiZt0F9AQRhaWe8aS2wxGGmHVAaRfSJ:Pt6Qomy9AQ/DaSHxy1PRg

    Score
    9/10
    • Contacts a large (76343) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Changes its process name

    • Enumerates running processes

      Discovers information about currently running processes on the system

MITRE ATT&CK Enterprise v15

Tasks