Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    mpsl.elf

  • Size

    122KB

  • Sample

    250303-3msllss1ax

  • MD5

    57505dcb62d8083c90e2fd95661b2850

  • SHA1

    7687e5b265853249d7540fc99dfbef292c75d692

  • SHA256

    f62e371e2dccff44fc2197eb8e52c8c2ae9e7cf54b414237946017c91b6025db

  • SHA512

    54d81c99dbb45a70b9470bc8b9f7ca3c0b52092a91173e130265f62342f91fc4094c49bebb271ea37312d158df0f56584ad12ea79295ee29b3aa99b0b124a57c

  • SSDEEP

    1536:rwE6/Sf4zTVP3E4Q5FKSwccdZPvHexxVENqtpOKZVT3tCzBjZknrwI4TaTB4d:+/SqN3E4Q5F6UxoKZt3tCzBj4fB4d

Malware Config

Extracted

Family

mirai

Botnet

OWARI

Targets

    • Target

      mpsl.elf

    • Size

      122KB

    • MD5

      57505dcb62d8083c90e2fd95661b2850

    • SHA1

      7687e5b265853249d7540fc99dfbef292c75d692

    • SHA256

      f62e371e2dccff44fc2197eb8e52c8c2ae9e7cf54b414237946017c91b6025db

    • SHA512

      54d81c99dbb45a70b9470bc8b9f7ca3c0b52092a91173e130265f62342f91fc4094c49bebb271ea37312d158df0f56584ad12ea79295ee29b3aa99b0b124a57c

    • SSDEEP

      1536:rwE6/Sf4zTVP3E4Q5FKSwccdZPvHexxVENqtpOKZVT3tCzBjZknrwI4TaTB4d:+/SqN3E4Q5F6UxoKZt3tCzBj4fB4d

    • Contacts a large (206801) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

MITRE ATT&CK Enterprise v15

Tasks