Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    1e7f0ad6f4c47c09786c5ef1df5dc9e23af63899437bf42e5dd09789378ff6a9.elf

  • Size

    161KB

  • Sample

    241205-cm4qrsypdp

  • MD5

    57e10fd1d7754fe9f5c25709c4b15014

  • SHA1

    92f5a85561ed547d055cf484165e7d310533c124

  • SHA256

    1e7f0ad6f4c47c09786c5ef1df5dc9e23af63899437bf42e5dd09789378ff6a9

  • SHA512

    a420bc0e629052978a122253cdeed0c7b8a961feabc005c57f43824587445ea14905d4b1e19d3e0fac94e9bf2ff8faaf33298e057800258c88d82e154d635ea8

  • SSDEEP

    3072:fywgcFqA5RXHX72MORPiXVN6eXLBYwArfyDujp+SmjlliUmh:lvFKMOZUN6eXLyPKDujp+SmjlliUmh

Malware Config

Targets

    • Target

      1e7f0ad6f4c47c09786c5ef1df5dc9e23af63899437bf42e5dd09789378ff6a9.elf

    • Size

      161KB

    • MD5

      57e10fd1d7754fe9f5c25709c4b15014

    • SHA1

      92f5a85561ed547d055cf484165e7d310533c124

    • SHA256

      1e7f0ad6f4c47c09786c5ef1df5dc9e23af63899437bf42e5dd09789378ff6a9

    • SHA512

      a420bc0e629052978a122253cdeed0c7b8a961feabc005c57f43824587445ea14905d4b1e19d3e0fac94e9bf2ff8faaf33298e057800258c88d82e154d635ea8

    • SSDEEP

      3072:fywgcFqA5RXHX72MORPiXVN6eXLBYwArfyDujp+SmjlliUmh:lvFKMOZUN6eXLyPKDujp+SmjlliUmh

    • Contacts a large (68770) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks