Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    ba9a8fd1b62b9d87224d171c2e3be0fd_JaffaCakes118

  • Size

    77KB

  • Sample

    240823-gl67qaycje

  • MD5

    ba9a8fd1b62b9d87224d171c2e3be0fd

  • SHA1

    489e7e3600ee60348849f8922a8e428f117aee7e

  • SHA256

    26e626872e082d2c3f713889e1c2dbbe077843d977950cc12ba8658f5ee0e33a

  • SHA512

    d7b5e6cf3fa4895ef90d0e60e3f2c8a095b7e2504202458a8caf348661e397ba1d3b71b4520e5fb816f12e7a9a4a95e06de4601140b3d5f2dc8eae248b945ce2

  • SSDEEP

    1536:J4gZLUay6+vl/Q15k9YrE9x5EZYg0TWNJ7DWTGmjJv09:Wmry6+vd2k9YrEsDJ7DWTGkJ89

Score
10/10

Malware Config

Extracted

Family

mirai

C2

cn.uvgczsuidrtg.com

lo.uvgczsuidrtg.com

Targets

    • Target

      ba9a8fd1b62b9d87224d171c2e3be0fd_JaffaCakes118

    • Size

      77KB

    • MD5

      ba9a8fd1b62b9d87224d171c2e3be0fd

    • SHA1

      489e7e3600ee60348849f8922a8e428f117aee7e

    • SHA256

      26e626872e082d2c3f713889e1c2dbbe077843d977950cc12ba8658f5ee0e33a

    • SHA512

      d7b5e6cf3fa4895ef90d0e60e3f2c8a095b7e2504202458a8caf348661e397ba1d3b71b4520e5fb816f12e7a9a4a95e06de4601140b3d5f2dc8eae248b945ce2

    • SSDEEP

      1536:J4gZLUay6+vl/Q15k9YrE9x5EZYg0TWNJ7DWTGmjJv09:Wmry6+vd2k9YrEsDJ7DWTGkJ89

    Score
    7/10
    • Deletes itself

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates active TCP sockets

      Gets active TCP sockets from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks