Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
bins.sh
-
Size
10KB
-
Sample
250106-bc2b8atjgk
-
MD5
26909ebd103b5c17abb36dfc85e52cb4
-
SHA1
eced3893a9140d2eb071a6a411c050d74f61aba8
-
SHA256
30367e0773b6cd4050b48c6362f82d9032ee3a01e38e091319797f54c7b4fdf3
-
SHA512
3618e101bb2f7b905fc69ae94d66d4fabd619b3bdca4bb4e8587a0d86e0ab68d9736b36ac420d4c1bc135283dcd9f2e12290312d6ef7f3331958b21e4ccd7584
-
SSDEEP
192:GZyl11kwJY8SC0v3vCeEeQ8el11kwk8Uv3vCeSt:GZyl11kwJmC0v3vCeEeQ8el11kwUv3vm
Malware Config
Targets
-
-
Target
bins.sh
-
Size
10KB
-
MD5
26909ebd103b5c17abb36dfc85e52cb4
-
SHA1
eced3893a9140d2eb071a6a411c050d74f61aba8
-
SHA256
30367e0773b6cd4050b48c6362f82d9032ee3a01e38e091319797f54c7b4fdf3
-
SHA512
3618e101bb2f7b905fc69ae94d66d4fabd619b3bdca4bb4e8587a0d86e0ab68d9736b36ac420d4c1bc135283dcd9f2e12290312d6ef7f3331958b21e4ccd7584
-
SSDEEP
192:GZyl11kwJY8SC0v3vCeEeQ8el11kwk8Uv3vCeSt:GZyl11kwJmC0v3vCeEeQ8el11kwUv3vm
Score10/10-
Detects Xorbot
-
Xorbot
Xorbot is a linux botnet and trojan targeting IoT devices.
-
Xorbot family
-
File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.
-
Executes dropped EXE
-
Renames itself
-
Creates/modifies Cron job
Cron allows running tasks on a schedule, and is commonly used for malware persistence.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
MITRE ATT&CK Enterprise v15
Defense Evasion
File and Directory Permissions Modification
1Linux and Mac File and Directory Permissions Modification
1Virtualization/Sandbox Evasion
1System Checks
1