Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    06bcfce41d363c4c6466c1f38c8a1d15.elf

  • Size

    79KB

  • Sample

    240704-mmn1eswbqm

  • MD5

    06bcfce41d363c4c6466c1f38c8a1d15

  • SHA1

    1f9cc3b3f62db3f85feb4039f33bc31b37af5a13

  • SHA256

    89b6f53ae64610a22e9b0188d0f515ad55ba7d8861764b43030127e52de8617e

  • SHA512

    9158d7f58b07361ddadfaf878c86b6d226b23056418b421d91364f24728e4e784d0abd9c49393a1bdcaf2bef38baaf97d250405914fb480f3db8a56b80ab1be7

  • SSDEEP

    1536:Kxncaw8eZnX538PUy2cbX9NrhEoNeLMxme3eNlffivZexIJnI8sR:2ZehJEX9NrhEoNeLMxmBSZeWJnI

Score
9/10

Malware Config

Targets

    • Target

      06bcfce41d363c4c6466c1f38c8a1d15.elf

    • Size

      79KB

    • MD5

      06bcfce41d363c4c6466c1f38c8a1d15

    • SHA1

      1f9cc3b3f62db3f85feb4039f33bc31b37af5a13

    • SHA256

      89b6f53ae64610a22e9b0188d0f515ad55ba7d8861764b43030127e52de8617e

    • SHA512

      9158d7f58b07361ddadfaf878c86b6d226b23056418b421d91364f24728e4e784d0abd9c49393a1bdcaf2bef38baaf97d250405914fb480f3db8a56b80ab1be7

    • SSDEEP

      1536:Kxncaw8eZnX538PUy2cbX9NrhEoNeLMxme3eNlffivZexIJnI8sR:2ZehJEX9NrhEoNeLMxmBSZeWJnI

    Score
    9/10
    • Contacts a large (62128) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Renames itself

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

MITRE ATT&CK Enterprise v15

Tasks