Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    boatnet.arm.elf

  • Size

    21KB

  • Sample

    250311-jmqx8swqw4

  • MD5

    18cfe846bb4a6263eb1820b123d0ca4a

  • SHA1

    184c9f3b046a4e623633c4c31049e16352e53933

  • SHA256

    2ffb548a63225056af4576866e9779405a62014ed92be1bf108b4e38ec27b3e5

  • SHA512

    a0bd7ab83cf6358208fac6f9a12b9900e98f8b07d80e0bd07c9c1979dc6884a413de54b98e09e47d92614b3de14c57309b561f5c7b00fa6c8d82b2bf163d23ea

  • SSDEEP

    384:vvtIoZxrSniaXs+qx+bwqPX+VOcFd5fHq52lxj/hymdGUop5hq:vvQn4j+ZO5fKAlx7s3Uozc

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boatnet.arm.elf

    • Size

      21KB

    • MD5

      18cfe846bb4a6263eb1820b123d0ca4a

    • SHA1

      184c9f3b046a4e623633c4c31049e16352e53933

    • SHA256

      2ffb548a63225056af4576866e9779405a62014ed92be1bf108b4e38ec27b3e5

    • SHA512

      a0bd7ab83cf6358208fac6f9a12b9900e98f8b07d80e0bd07c9c1979dc6884a413de54b98e09e47d92614b3de14c57309b561f5c7b00fa6c8d82b2bf163d23ea

    • SSDEEP

      384:vvtIoZxrSniaXs+qx+bwqPX+VOcFd5fHq52lxj/hymdGUop5hq:vvQn4j+ZO5fKAlx7s3Uozc

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks