Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    EdiAf.x86.elf

  • Size

    62KB

  • Sample

    250203-mhq9zszqek

  • MD5

    a2dfe2560bc82b1df167f014b74607d4

  • SHA1

    8b3594b9613a4b440ec8460e878a6cda9ea1b0f6

  • SHA256

    046073ea4485417bfe53a2d0b9e8c8afe4fc6f8aa2cec233d517707d0bf47525

  • SHA512

    21148fdb9c50ab6ce535bca9a65e2f6e310afd65e4d5df64bc0093f1f10aaa32068d1ac17f0085bcc58bb50941472ef893818d617eff94864a7e505f1da85804

  • SSDEEP

    1536:yhHf5RgcvJp+2GPWsFAptQpoYg9YIfKouCF9i5pihOhVAFbfVt:yhHRRgcvO2G1cCoYg2ouvMhWCJfb

Malware Config

Extracted

Family

mirai

Botnet

UNSTABLE

C2

srv.vlrt-gap.com

Targets

    • Target

      EdiAf.x86.elf

    • Size

      62KB

    • MD5

      a2dfe2560bc82b1df167f014b74607d4

    • SHA1

      8b3594b9613a4b440ec8460e878a6cda9ea1b0f6

    • SHA256

      046073ea4485417bfe53a2d0b9e8c8afe4fc6f8aa2cec233d517707d0bf47525

    • SHA512

      21148fdb9c50ab6ce535bca9a65e2f6e310afd65e4d5df64bc0093f1f10aaa32068d1ac17f0085bcc58bb50941472ef893818d617eff94864a7e505f1da85804

    • SSDEEP

      1536:yhHf5RgcvJp+2GPWsFAptQpoYg9YIfKouCF9i5pihOhVAFbfVt:yhHRRgcvO2G1cCoYg2ouvMhWCJfb

    • Deletes itself

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks