Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2934298896dab8ecfc15035b5739d070.bin

  • Size

    37KB

  • Sample

    250307-bg4m5ssjt4

  • MD5

    1c6d4555f1330cdd4e92a7e4e4bb4336

  • SHA1

    5139d9d44b69a6f4c53f105a1f05ba64d9d0df16

  • SHA256

    871c0c69c5cdac7fe0739e51098f34246d0a03e86492ff7c42abd127fe33afc3

  • SHA512

    51d385a933a0a1788ae3e0f6edf6e32d1826b97443a643924da3357d5ff67852eadab253fccdd6030051c559236cebe50e5841320878b9b8ea629d6e8fe60cb9

  • SSDEEP

    768:o1aZuGOeNmc0P6l2lW9BynZ3RGmBWfxzWpO2XKyyMC:8zW0SiWfyrGmwfxzWpO2XKyy5

Malware Config

Extracted

Family

mirai

Botnet

MIRAI

C2

hjfdjkahfkejw.chickenkiller.com

Targets

    • Target

      c39fb97d74db466bd305b8695d0b0cd0ebc7707462f479f04baeae904d3dc38e.elf

    • Size

      38KB

    • MD5

      2934298896dab8ecfc15035b5739d070

    • SHA1

      ec02459edf218ff107425a240a52161270fa69a8

    • SHA256

      c39fb97d74db466bd305b8695d0b0cd0ebc7707462f479f04baeae904d3dc38e

    • SHA512

      690a20f0b35cd05e3de2e8a522fba912bdcd00a078aa0e6438480e85808106121be657c555fc380eeb8aa721b9d302f556c20d8184d7b19cc30b913f0b15c9ea

    • SSDEEP

      768:A/HmOY4lDYuaLQjGW0JVxzdUBcBm/c+kotPkv5qyXmaOs/lRv9sPw1:2bYG0TkQxhU5ZlG5JXThFuw1

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Contacts a large (193696) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • File and Directory Permissions Modification

      Adversaries may modify file or directory permissions to evade defenses.

MITRE ATT&CK Enterprise v15

Tasks