Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    EdiAf.x86.elf

  • Size

    30KB

  • Sample

    250316-m71vqasn17

  • MD5

    a1ad9bc913b861f4edc64291cd344c11

  • SHA1

    c30038c375f5836979770e94c3ddffd9aeb7239a

  • SHA256

    1e3cbc28cfd86429f7715bede5578f81aecc1656b4d52688ee132413c28b269f

  • SHA512

    08b7f6bb1120df3b0b519c6f4c965bddf19b2cc0fb833e84f3fe5cd206af808ddc6b5e05df4493e7c2b688d6497d4893b78e77b5cc7505809a5120e57f491aab

  • SSDEEP

    768:65Ox64mumNhAbib/NbX0lieYz6p8ojLu3VwtgEs+tFKP:6EQ4mumXjhtHGfy3ytv/jk

Malware Config

Extracted

Family

mirai

Botnet

UNSTABLE

C2

server1988.ignorelist.com

Targets

    • Target

      EdiAf.x86.elf

    • Size

      30KB

    • MD5

      a1ad9bc913b861f4edc64291cd344c11

    • SHA1

      c30038c375f5836979770e94c3ddffd9aeb7239a

    • SHA256

      1e3cbc28cfd86429f7715bede5578f81aecc1656b4d52688ee132413c28b269f

    • SHA512

      08b7f6bb1120df3b0b519c6f4c965bddf19b2cc0fb833e84f3fe5cd206af808ddc6b5e05df4493e7c2b688d6497d4893b78e77b5cc7505809a5120e57f491aab

    • SSDEEP

      768:65Ox64mumNhAbib/NbX0lieYz6p8ojLu3VwtgEs+tFKP:6EQ4mumXjhtHGfy3ytv/jk

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Deletes itself

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks