Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    6e3090a611d816254ce0859d5568d625f62fc77814044adb9e9636791d647ce1.elf

  • Size

    63KB

  • Sample

    250306-etaglsyl16

  • MD5

    950c1892f64bd8a62c81c2794a8932da

  • SHA1

    c2b50d1be198b2047e472845276d78e8fdb722fd

  • SHA256

    6e3090a611d816254ce0859d5568d625f62fc77814044adb9e9636791d647ce1

  • SHA512

    67b95327e319d59a63f3ba581163c85390af969bf45b996e4948f85dd1f30fb21f73bf53e113770c02a4fa7bcd58f45ff263ba21d2b2e0514202a839465417d2

  • SSDEEP

    1536:Xy7Pbam9aCwqliN9myt/AT+eoaA/F36u88zLN8Hl0:Qbaqs20oTZsD80Rkl0

Malware Config

Extracted

Family

mirai

Botnet

MIRAI

C2

hjfdjkahfkejw.chickenkiller.com

Targets

    • Target

      6e3090a611d816254ce0859d5568d625f62fc77814044adb9e9636791d647ce1.elf

    • Size

      63KB

    • MD5

      950c1892f64bd8a62c81c2794a8932da

    • SHA1

      c2b50d1be198b2047e472845276d78e8fdb722fd

    • SHA256

      6e3090a611d816254ce0859d5568d625f62fc77814044adb9e9636791d647ce1

    • SHA512

      67b95327e319d59a63f3ba581163c85390af969bf45b996e4948f85dd1f30fb21f73bf53e113770c02a4fa7bcd58f45ff263ba21d2b2e0514202a839465417d2

    • SSDEEP

      1536:Xy7Pbam9aCwqliN9myt/AT+eoaA/F36u88zLN8Hl0:Qbaqs20oTZsD80Rkl0

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Contacts a large (172099) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • File and Directory Permissions Modification

      Adversaries may modify file or directory permissions to evade defenses.

MITRE ATT&CK Enterprise v15

Tasks