Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
1s -
max time network
153s -
platform
linux_mips -
resource
debian9-mipsbe-en-20211208 -
resource tags
arch:mipsimage:debian9-mipsbe-en-20211208kernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem -
submitted
24/04/2023, 14:28
Static task
static1
Behavioral task
behavioral1
Sample
send_gafgyt_v0.4.sh
Resource
ubuntu1804-amd64-en-20211208
Behavioral task
behavioral2
Sample
send_gafgyt_v0.4.sh
Resource
debian9-armhf-20221111-en
Behavioral task
behavioral3
Sample
send_gafgyt_v0.4.sh
Resource
debian9-mipsbe-en-20211208
Behavioral task
behavioral4
Sample
send_gafgyt_v0.4.sh
Resource
debian9-mipsel-20221111-en
General
-
Target
send_gafgyt_v0.4.sh
-
Size
2KB
-
MD5
03c58e9c943eeee91eb8bf80f4df00e2
-
SHA1
703a77d14235452b77e2cf45f6783bca47d77208
-
SHA256
69312835335de3104cb0330197a8e1e8f51a2650a875187318d7402e57c8a76e
-
SHA512
b614b0c719ceaf8cf62606d46393256ab981fc0a4eeddd83179698c304983fbea6943118c6b310fb6bfcf29013a7ad1b353ab10c460159ffc99baa8e6791b62c
Malware Config
Signatures
-
Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
description ioc Process /tmp/send_gafgyt_v0.4.sh /tmp/send_gafgyt_v0.4.sh send_gafgyt_v0.4.sh