Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    mips.elf

  • Size

    118KB

  • Sample

    250303-3xegqsttat

  • MD5

    a8443499e9bab877440ab4ee51596df0

  • SHA1

    84144e8ebd714efba2c53bfb1db195a2016cfff8

  • SHA256

    83fd3ac53e3984c6cbf31b37c8afce1f0b61b1b293b3492da70b9713097f3730

  • SHA512

    ea88fea7afc23626590758831ee5532b251c4992128c20a5cf4550faffe5ed3d7fb4980ac24ee948671cf865bd728b3f89fc3299aeecae871658fae2c96e1a0e

  • SSDEEP

    3072:aTVr4Eb1pm6o6hjdftQ50pnrZlBr6Kj/A5B5BMU:aJr4E1p3ZhjdftQIrZvTDUmU

Malware Config

Extracted

Family

mirai

Botnet

OWARI

Targets

    • Target

      mips.elf

    • Size

      118KB

    • MD5

      a8443499e9bab877440ab4ee51596df0

    • SHA1

      84144e8ebd714efba2c53bfb1db195a2016cfff8

    • SHA256

      83fd3ac53e3984c6cbf31b37c8afce1f0b61b1b293b3492da70b9713097f3730

    • SHA512

      ea88fea7afc23626590758831ee5532b251c4992128c20a5cf4550faffe5ed3d7fb4980ac24ee948671cf865bd728b3f89fc3299aeecae871658fae2c96e1a0e

    • SSDEEP

      3072:aTVr4Eb1pm6o6hjdftQ50pnrZlBr6Kj/A5B5BMU:aJr4E1p3ZhjdftQIrZvTDUmU

    • Contacts a large (222032) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

MITRE ATT&CK Enterprise v15

Tasks