Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    na.elf

  • Size

    91KB

  • Sample

    250304-m2xk4syvfx

  • MD5

    310b2ce3fe82f8c4e0e93e3e363cdd4d

  • SHA1

    373f42fe857042ff1ad0ad53cb4911ce0cab6864

  • SHA256

    2b9923116fb1183b64ca554f552046457545e0917046b71ae51712813641abcb

  • SHA512

    cdafc94d94c471ad5186ffc1a351884f01bc5e002b87dfe7007b6b51a7de2c0b865a6d6d84ee5a2602d8accd16adb3ab916af97a7ddf085f0165decaee993484

  • SSDEEP

    1536:8dNdrR+WG0DWvoARDP9a4bb1xW6eIjCZoKeZW155Vxgrl3fWCIAvgR4:8dNdFJkZJCZLwYjnghukgR4

Malware Config

Extracted

Family

mirai

Botnet

OWARI

Targets

    • Target

      na.elf

    • Size

      91KB

    • MD5

      310b2ce3fe82f8c4e0e93e3e363cdd4d

    • SHA1

      373f42fe857042ff1ad0ad53cb4911ce0cab6864

    • SHA256

      2b9923116fb1183b64ca554f552046457545e0917046b71ae51712813641abcb

    • SHA512

      cdafc94d94c471ad5186ffc1a351884f01bc5e002b87dfe7007b6b51a7de2c0b865a6d6d84ee5a2602d8accd16adb3ab916af97a7ddf085f0165decaee993484

    • SSDEEP

      1536:8dNdrR+WG0DWvoARDP9a4bb1xW6eIjCZoKeZW155Vxgrl3fWCIAvgR4:8dNdFJkZJCZLwYjnghukgR4

    • Contacts a large (49104) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

MITRE ATT&CK Enterprise v15

Tasks