Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    dd29103a857ef59ef918ffd0886d55166cf7efaf7e0794339a2e2f3fc27d9aed.elf

  • Size

    36KB

  • Sample

    250306-fzgcsay1e1

  • MD5

    1ad15ef0367df3920f415c4c750793e2

  • SHA1

    e7ce99727bfddeb6a8b477d0845075f17a9d795a

  • SHA256

    dd29103a857ef59ef918ffd0886d55166cf7efaf7e0794339a2e2f3fc27d9aed

  • SHA512

    88d34887c382957c64f91958f8978486831b01b5d5a1f1d1a3112867dfb4a6dfe9edd3f0ee6b147df1a1dfd2141bca7cfba776361cbe4acc161e56613a17a9d6

  • SSDEEP

    768:SYCBDLPeYqVRkF3jmQjsQH+Y86ucvtgWqaGof2WYR03U9:hWD7+VeF6MoMtgWtf2dD

Malware Config

Extracted

Family

mirai

Botnet

MIRAI

C2

hjfdjkahfkejw.chickenkiller.com

Targets

    • Target

      dd29103a857ef59ef918ffd0886d55166cf7efaf7e0794339a2e2f3fc27d9aed.elf

    • Size

      36KB

    • MD5

      1ad15ef0367df3920f415c4c750793e2

    • SHA1

      e7ce99727bfddeb6a8b477d0845075f17a9d795a

    • SHA256

      dd29103a857ef59ef918ffd0886d55166cf7efaf7e0794339a2e2f3fc27d9aed

    • SHA512

      88d34887c382957c64f91958f8978486831b01b5d5a1f1d1a3112867dfb4a6dfe9edd3f0ee6b147df1a1dfd2141bca7cfba776361cbe4acc161e56613a17a9d6

    • SSDEEP

      768:SYCBDLPeYqVRkF3jmQjsQH+Y86ucvtgWqaGof2WYR03U9:hWD7+VeF6MoMtgWtf2dD

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Contacts a large (174599) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • File and Directory Permissions Modification

      Adversaries may modify file or directory permissions to evade defenses.

MITRE ATT&CK Enterprise v15

Tasks