Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    fuckjewishpeople.x86.elf

  • Size

    91KB

  • Sample

    230416-pbfk1saa98

  • MD5

    86ecbc0fbd3c283a35c56d7f230b4cc5

  • SHA1

    df4f59e1f11af27779b39da969f69a2a355321b6

  • SHA256

    854ccaac949e7799aaf7bc424d230fdfb4cf51285f33a07173f374be55c7ebb7

  • SHA512

    e1afe489685e4d178ca03df2a9d9a77dd370b6ccc0c14656c020e8243c0a8ec4aef3ea213af89351b783aabc9e83af5dcb707119e2d70eef9dbe79423ae190fa

  • SSDEEP

    1536:p7rHXokXsWFVSzkfLEkZAT5ipG5v3JphauH/SPNlDDUg6I9um2Xj5YZb0e:pcCPOkfQfNipGdJphaE/AVog99um2XFY

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

41.216.182.214:4258

Targets

    • Target

      fuckjewishpeople.x86.elf

    • Size

      91KB

    • MD5

      86ecbc0fbd3c283a35c56d7f230b4cc5

    • SHA1

      df4f59e1f11af27779b39da969f69a2a355321b6

    • SHA256

      854ccaac949e7799aaf7bc424d230fdfb4cf51285f33a07173f374be55c7ebb7

    • SHA512

      e1afe489685e4d178ca03df2a9d9a77dd370b6ccc0c14656c020e8243c0a8ec4aef3ea213af89351b783aabc9e83af5dcb707119e2d70eef9dbe79423ae190fa

    • SSDEEP

      1536:p7rHXokXsWFVSzkfLEkZAT5ipG5v3JphauH/SPNlDDUg6I9um2Xj5YZb0e:pcCPOkfQfNipGdJphaE/AVog99um2XFY

    Score
    7/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    • Reads system network configuration

      Uses contents of /proc filesystem to enumerate network settings.

MITRE ATT&CK Enterprise v6

Tasks