Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    GODLYBINSNIGGAYOUCANTCRACKTHESEBITCH11111222268.sh

  • Size

    2KB

  • Sample

    250323-nhfc6asls3

  • MD5

    4a5b9744593a1e2c7ffc5088a4481f5f

  • SHA1

    61b4d769440d4c2cc4a2eadb2d8902589ebd7686

  • SHA256

    23023b865ce51c4eedd56707c5ca7af36e5a6e3c721ddd2606db15bee813f38a

  • SHA512

    343cceaf82065cdeeeafc4068feafbace1fe4fd1cc1c689c8869a485206ef5a47248ab6c1b6f86133921e40d211f18495dd7ff3a6865fbbb85ee4749fe849121

Malware Config

Extracted

Family

mirai

Botnet

MIRAI

Extracted

Family

mirai

Botnet

MIRAI

Extracted

Family

mirai

Botnet

MIRAI

Extracted

Family

mirai

Botnet

MIRAI

Extracted

Family

mirai

Botnet

MIRAI

Extracted

Family

mirai

Botnet

MIRAI

Targets

    • Target

      GODLYBINSNIGGAYOUCANTCRACKTHESEBITCH11111222268.sh

    • Size

      2KB

    • MD5

      4a5b9744593a1e2c7ffc5088a4481f5f

    • SHA1

      61b4d769440d4c2cc4a2eadb2d8902589ebd7686

    • SHA256

      23023b865ce51c4eedd56707c5ca7af36e5a6e3c721ddd2606db15bee813f38a

    • SHA512

      343cceaf82065cdeeeafc4068feafbace1fe4fd1cc1c689c8869a485206ef5a47248ab6c1b6f86133921e40d211f18495dd7ff3a6865fbbb85ee4749fe849121

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • File and Directory Permissions Modification

      Adversaries may modify file or directory permissions to evade defenses.

    • Deletes itself

    • Executes dropped EXE

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates active TCP sockets

      Gets active TCP sockets from /proc virtual filesystem.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks