Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    morte.x86-20250307-0225.elf

  • Size

    37KB

  • Sample

    250307-cwxzkstjt5

  • MD5

    352f85fce51be0b59e66b2648c6e2404

  • SHA1

    a5f4690c2be38f731cc92e956d55929860920f2b

  • SHA256

    90703dfb40886ec14c46aea2f6a54c48558f6137e87f5cf971925ff25c7ea670

  • SHA512

    35d6880083e8f9f0d44afe8d95c889d8c118e1458d5bd62d35d997c57543e92895a2b57075bf3ec21fe34c3d5dff361962a8a10ddb1eb0dfb935afef730751aa

  • SSDEEP

    768:v8wWKhccMxQ8xSeIenWL/r+xf6LShXlsRDFf6A2WHyrr5eff7LZdWgpZ:uK49xVWL6RX4gDWHs56/WaZ

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      morte.x86-20250307-0225.elf

    • Size

      37KB

    • MD5

      352f85fce51be0b59e66b2648c6e2404

    • SHA1

      a5f4690c2be38f731cc92e956d55929860920f2b

    • SHA256

      90703dfb40886ec14c46aea2f6a54c48558f6137e87f5cf971925ff25c7ea670

    • SHA512

      35d6880083e8f9f0d44afe8d95c889d8c118e1458d5bd62d35d997c57543e92895a2b57075bf3ec21fe34c3d5dff361962a8a10ddb1eb0dfb935afef730751aa

    • SSDEEP

      768:v8wWKhccMxQ8xSeIenWL/r+xf6LShXlsRDFf6A2WHyrr5eff7LZdWgpZ:uK49xVWL6RX4gDWHs56/WaZ

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Contacts a large (23233) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

MITRE ATT&CK Enterprise v15

Tasks