Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    mips.elf

  • Size

    110KB

  • Sample

    250305-cahmrsvqv3

  • MD5

    df824b90081efe570ed553d63d388c81

  • SHA1

    b14dfbd74b42bfcb91da71cceea69c6f4995f059

  • SHA256

    a96f3321201e5cbf4655b1b8c204cbbd8970a7504ca787edd4d70c32bd11a623

  • SHA512

    c7662cd0db6588dec14e235f95fa722ab57d7aa86bf6897f01e25891a45bce79cd37b136453b25e890f6f80f73372ccffd77171536a70fe426a8e1552a6ce7ff

  • SSDEEP

    3072:qz1u8TfSyBFataXSdQ0YCtxGCtgWmHd7BPdt:qxu8TfSyBQ4XSdS2xGEpyVdt

Malware Config

Extracted

Family

mirai

Botnet

OWARI

Targets

    • Target

      mips.elf

    • Size

      110KB

    • MD5

      df824b90081efe570ed553d63d388c81

    • SHA1

      b14dfbd74b42bfcb91da71cceea69c6f4995f059

    • SHA256

      a96f3321201e5cbf4655b1b8c204cbbd8970a7504ca787edd4d70c32bd11a623

    • SHA512

      c7662cd0db6588dec14e235f95fa722ab57d7aa86bf6897f01e25891a45bce79cd37b136453b25e890f6f80f73372ccffd77171536a70fe426a8e1552a6ce7ff

    • SSDEEP

      3072:qz1u8TfSyBFataXSdQ0YCtxGCtgWmHd7BPdt:qxu8TfSyBQ4XSdS2xGEpyVdt

    • Contacts a large (48965) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

MITRE ATT&CK Enterprise v15

Tasks