Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    bimbo-mips.elf

  • Size

    62KB

  • Sample

    250328-gpa9fsvjs6

  • MD5

    d06f5baefae0bf3c8d26beb0e4f20c83

  • SHA1

    e8084af8c63b6dfd013353087af5a1f96fa248bc

  • SHA256

    0b7a2b8eb3dab99bbbea0b26336a03f2838fb8b5e317d9729f3d83d5654e2223

  • SHA512

    9b277fb2c723cf97db82b50e6fcde25b90de1de6a36ea61481b337b2f0feb46ec44a5d797c8bfde0ee0c5eb0372e526d053d920e4b41d79c39d762d2b4f50e12

  • SSDEEP

    1536:Bmcm6mBeMsMsxS8rYS4YVjtuzUImLAllvp1VRieLQPFS7pAzfI:BmcOBeMsMsxXsGLA3vp1VR50PFWP

Malware Config

Targets

    • Target

      bimbo-mips.elf

    • Size

      62KB

    • MD5

      d06f5baefae0bf3c8d26beb0e4f20c83

    • SHA1

      e8084af8c63b6dfd013353087af5a1f96fa248bc

    • SHA256

      0b7a2b8eb3dab99bbbea0b26336a03f2838fb8b5e317d9729f3d83d5654e2223

    • SHA512

      9b277fb2c723cf97db82b50e6fcde25b90de1de6a36ea61481b337b2f0feb46ec44a5d797c8bfde0ee0c5eb0372e526d053d920e4b41d79c39d762d2b4f50e12

    • SSDEEP

      1536:Bmcm6mBeMsMsxS8rYS4YVjtuzUImLAllvp1VRieLQPFS7pAzfI:BmcOBeMsMsxXsGLA3vp1VR50PFWP

    • Contacts a large (243015) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Reads process memory

      Read the memory of a process through the /proc virtual filesystem. This can be used to steal credentials.

MITRE ATT&CK Enterprise v15

Tasks