Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    bins.sh

  • Size

    10KB

  • Sample

    250105-qp3hdaxnel

  • MD5

    91c2144bd8f409393240434d81002662

  • SHA1

    a2eb7da173ffc5f293f72d79735c61623ececcd5

  • SHA256

    817f994e9e4bee4864261a902c6df088048aedd4532775b98c065d3f404bcce5

  • SHA512

    56148bba9d79076971845c8b68eb9e6e37f4edbc768d43f9dcd368c8ff0ae4ba3d7cb88fd45aacc535c107cca313b1bef58dc598cd76ecec06ceca4b49aba4fb

  • SSDEEP

    192:QiarAUrGnMAryIlTEvEnEkEREdE0qFvUUEvEnEkEREdE3WMAryIl9iarAUs:2GB1qFvUXUA

Malware Config

Targets

    • Target

      bins.sh

    • Size

      10KB

    • MD5

      91c2144bd8f409393240434d81002662

    • SHA1

      a2eb7da173ffc5f293f72d79735c61623ececcd5

    • SHA256

      817f994e9e4bee4864261a902c6df088048aedd4532775b98c065d3f404bcce5

    • SHA512

      56148bba9d79076971845c8b68eb9e6e37f4edbc768d43f9dcd368c8ff0ae4ba3d7cb88fd45aacc535c107cca313b1bef58dc598cd76ecec06ceca4b49aba4fb

    • SSDEEP

      192:QiarAUrGnMAryIlTEvEnEkEREdE0qFvUUEvEnEkEREdE3WMAryIl9iarAUs:2GB1qFvUXUA

    • Detects Xorbot

    • Xorbot

      Xorbot is a linux botnet and trojan targeting IoT devices.

    • Xorbot family

    • Contacts a large (652) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • File and Directory Permissions Modification

      Adversaries may modify file or directory permissions to evade defenses.

    • Executes dropped EXE

    • Renames itself

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Creates/modifies Cron job

      Cron allows running tasks on a schedule, and is commonly used for malware persistence.

    • Enumerates running processes

      Discovers information about currently running processes on the system

MITRE ATT&CK Enterprise v15

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.