Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    637-1-0x00008000-0x000236c8-memory.dmp

  • Size

    96KB

  • Sample

    250111-274nyatqaw

  • MD5

    1b7fb737c82199b22da4144c8172fcff

  • SHA1

    ebc661e34dc83b5e26c24d12f0f452691d1154b0

  • SHA256

    baaa1c24ef116d3a274f2c94fe5363327f37c971e360e26c7e53e047ff8dfcb4

  • SHA512

    bf7d3f01e55239f6b19985cf6227534aa5269ad08502b75392625f3884a5bc1b43c2b0c42fdc5a5ac8bac56a46decc62750374c8086fba63359dc5c97926d7c9

  • SSDEEP

    3072:s2bmltnY4BRae/xGPZ06v/mYp+C9T6Mjr5:XbmltXRae/xGPd/z+cT6Or5

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      637-1-0x00008000-0x000236c8-memory.dmp

    • Size

      96KB

    • MD5

      1b7fb737c82199b22da4144c8172fcff

    • SHA1

      ebc661e34dc83b5e26c24d12f0f452691d1154b0

    • SHA256

      baaa1c24ef116d3a274f2c94fe5363327f37c971e360e26c7e53e047ff8dfcb4

    • SHA512

      bf7d3f01e55239f6b19985cf6227534aa5269ad08502b75392625f3884a5bc1b43c2b0c42fdc5a5ac8bac56a46decc62750374c8086fba63359dc5c97926d7c9

    • SSDEEP

      3072:s2bmltnY4BRae/xGPZ06v/mYp+C9T6Mjr5:XbmltXRae/xGPd/z+cT6Or5

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks