Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    EdiAf.mpsl.elf

  • Size

    98KB

  • Sample

    250203-men1fszpdj

  • MD5

    15a5a8e9274911d77a2f712c844e9ce4

  • SHA1

    5a99c4100991a874b25a98c7e73a46689f5378f2

  • SHA256

    0a2c9150391cf228a7ce859473d8adce0fd4b2e10c71f6cf76e53abbff66aab3

  • SHA512

    987e68ae81f29bd8338782c77c4fae9d47bd89764279061771272bb3f386ff24b9a1e03f9643b06922f731a4371522ab62d04f5212eeb5569aa2801f5fc49147

  • SSDEEP

    1536:byxgEvcKwxXHQu9+c8qXKG3+7Tjq35dRhJpNemTZNh+uSZW4J/:byxgEvcKwxxXKGDdRhJOmTIY4J

Malware Config

Extracted

Family

mirai

Botnet

UNSTABLE

Targets

    • Target

      EdiAf.mpsl.elf

    • Size

      98KB

    • MD5

      15a5a8e9274911d77a2f712c844e9ce4

    • SHA1

      5a99c4100991a874b25a98c7e73a46689f5378f2

    • SHA256

      0a2c9150391cf228a7ce859473d8adce0fd4b2e10c71f6cf76e53abbff66aab3

    • SHA512

      987e68ae81f29bd8338782c77c4fae9d47bd89764279061771272bb3f386ff24b9a1e03f9643b06922f731a4371522ab62d04f5212eeb5569aa2801f5fc49147

    • SSDEEP

      1536:byxgEvcKwxXHQu9+c8qXKG3+7Tjq35dRhJpNemTZNh+uSZW4J/:byxgEvcKwxxXKGDdRhJOmTIY4J

    • Deletes itself

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks