Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    x86_64.elf

  • Size

    89KB

  • Sample

    250304-apnq8atxht

  • MD5

    3627eda7970b2c954174f89a0b663949

  • SHA1

    cf1931142618154a9bfb0809425c18ad76c038b3

  • SHA256

    dfcd13aaf728f044a90b583bfc9aa90d62c27e99f9b1591c56b6ad60eccd698b

  • SHA512

    136c17edb0428a662ab8883f84ec232bdc52fb2c520e09576e9e3e6d8295e7448045d639931c9d902b0844b0ae424815db0c6192ac11cd39a61e334d90a38267

  • SSDEEP

    1536:3sscVnGBR3ZtutdYzvhMOJVNIPBJoPDw5sXNYOWdwq5uZMvJDAS/tv+YyL:TcwP3ZtutdUvhMO3NSBJeZYdkZMvSS/U

Malware Config

Extracted

Family

mirai

Botnet

OWARI

Targets

    • Target

      x86_64.elf

    • Size

      89KB

    • MD5

      3627eda7970b2c954174f89a0b663949

    • SHA1

      cf1931142618154a9bfb0809425c18ad76c038b3

    • SHA256

      dfcd13aaf728f044a90b583bfc9aa90d62c27e99f9b1591c56b6ad60eccd698b

    • SHA512

      136c17edb0428a662ab8883f84ec232bdc52fb2c520e09576e9e3e6d8295e7448045d639931c9d902b0844b0ae424815db0c6192ac11cd39a61e334d90a38267

    • SSDEEP

      1536:3sscVnGBR3ZtutdYzvhMOJVNIPBJoPDw5sXNYOWdwq5uZMvJDAS/tv+YyL:TcwP3ZtutdUvhMO3NSBJeZYdkZMvSS/U

    • Contacts a large (222608) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

MITRE ATT&CK Enterprise v15

Tasks