Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
bins.sh
-
Size
10KB
-
Sample
250227-xh4keswnt9
-
MD5
d8126e215a151514ecccbac0d89fa606
-
SHA1
b1a73227b60aed5bec1dfb839fb3284e529c3f14
-
SHA256
37a5a3e5ce57b6a774808847b27b716c7809d8da5349d0a6c0ed0d945fd9de45
-
SHA512
c5fb3b89c403a94cb75a375c82d4f541f3d1d290dd37156449ed63ae0d5ffa578a951e9068f65c8a353bd8e482cb73305b19a7401302a703351b3d3540cc7f7a
-
SSDEEP
192:NmZcq5vRAiAeAdAgAYA4bAiAeAdAgAYAuQn:Nm/5vRVxmnfTbVxmnfY
Malware Config
Targets
-
-
Target
bins.sh
-
Size
10KB
-
MD5
d8126e215a151514ecccbac0d89fa606
-
SHA1
b1a73227b60aed5bec1dfb839fb3284e529c3f14
-
SHA256
37a5a3e5ce57b6a774808847b27b716c7809d8da5349d0a6c0ed0d945fd9de45
-
SHA512
c5fb3b89c403a94cb75a375c82d4f541f3d1d290dd37156449ed63ae0d5ffa578a951e9068f65c8a353bd8e482cb73305b19a7401302a703351b3d3540cc7f7a
-
SSDEEP
192:NmZcq5vRAiAeAdAgAYA4bAiAeAdAgAYAuQn:Nm/5vRVxmnfTbVxmnfY
Score10/10-
Detects Xorbot
-
Xorbot
Xorbot is a linux botnet and trojan targeting IoT devices.
-
Xorbot family
-
File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.
-
Executes dropped EXE
-
Renames itself
-
Creates/modifies Cron job
Cron allows running tasks on a schedule, and is commonly used for malware persistence.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
MITRE ATT&CK Enterprise v15
Defense Evasion
File and Directory Permissions Modification
1Linux and Mac File and Directory Permissions Modification
1Virtualization/Sandbox Evasion
1System Checks
1