Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    f67bdb0d3d4dde55d7ef7c9ad25a8e068d7ac5ac084fba3b2a9c40d36b13aa48.elf

  • Size

    74KB

  • Sample

    250320-e62fvstthz

  • MD5

    80cc3593d846a47aa9b3b8d61111d13b

  • SHA1

    9222d0efcf42c5f72af22ff5324a17ee0e752115

  • SHA256

    f67bdb0d3d4dde55d7ef7c9ad25a8e068d7ac5ac084fba3b2a9c40d36b13aa48

  • SHA512

    f3285435878e3aa7071ee18de38c3b81230344cff48b85735b2a499e820aaa8daf907e460d4fcd16ab2b4a1d9eabf5daeee92823223d6956efafcda0aa0689f5

  • SSDEEP

    1536:aHy7eP768Dky5FGxZMeYpCVM6+eeLMLMrZyCRBWcXPbbBRhO:RePm8Dix+eYp+M6+TMQZdEcXPbs

Malware Config

Extracted

Family

mirai

Botnet

BOTNET

Targets

    • Target

      f67bdb0d3d4dde55d7ef7c9ad25a8e068d7ac5ac084fba3b2a9c40d36b13aa48.elf

    • Size

      74KB

    • MD5

      80cc3593d846a47aa9b3b8d61111d13b

    • SHA1

      9222d0efcf42c5f72af22ff5324a17ee0e752115

    • SHA256

      f67bdb0d3d4dde55d7ef7c9ad25a8e068d7ac5ac084fba3b2a9c40d36b13aa48

    • SHA512

      f3285435878e3aa7071ee18de38c3b81230344cff48b85735b2a499e820aaa8daf907e460d4fcd16ab2b4a1d9eabf5daeee92823223d6956efafcda0aa0689f5

    • SSDEEP

      1536:aHy7eP768Dky5FGxZMeYpCVM6+eeLMLMrZyCRBWcXPbbBRhO:RePm8Dix+eYp+M6+TMQZdEcXPbs

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Renames itself

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Enumerates running processes

      Discovers information about currently running processes on the system

MITRE ATT&CK Enterprise v15

Tasks