Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    boatnet.mpsl.elf

  • Size

    24KB

  • Sample

    250311-jmqmgawqw3

  • MD5

    35d3f332b789ce1637b87623bd4a9e07

  • SHA1

    df0e9c3267947c6953562e761972c534b57a1731

  • SHA256

    f1b33955b463f284f4e11a98028ca14dbeae42ca6282ecd3984aaf1a1244f06b

  • SHA512

    bf256be9abc1afa296d72da50669c925c7cd5d9c94aec20103607267e457803609a73f79f55c7ee2e35fd585889e40f5232af1b9801f19c94664a1ecdc3d9a30

  • SSDEEP

    768:oCrQlS07dEv0UXqUhvQE+CXQKMQKCXBpt5ZqEWvX:/QlS07FUXqIYSXQKqu5qV

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boatnet.mpsl.elf

    • Size

      24KB

    • MD5

      35d3f332b789ce1637b87623bd4a9e07

    • SHA1

      df0e9c3267947c6953562e761972c534b57a1731

    • SHA256

      f1b33955b463f284f4e11a98028ca14dbeae42ca6282ecd3984aaf1a1244f06b

    • SHA512

      bf256be9abc1afa296d72da50669c925c7cd5d9c94aec20103607267e457803609a73f79f55c7ee2e35fd585889e40f5232af1b9801f19c94664a1ecdc3d9a30

    • SSDEEP

      768:oCrQlS07dEv0UXqUhvQE+CXQKMQKCXBpt5ZqEWvX:/QlS07FUXqIYSXQKqu5qV

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks