Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    e568228e13b2c13e588ecd266dae9b0c.elf

  • Size

    109KB

  • Sample

    230426-jnn52ahg8v

  • MD5

    e568228e13b2c13e588ecd266dae9b0c

  • SHA1

    6bbc91bed773d2e03cb3a10e9d881b507e48795a

  • SHA256

    d7aab89fdf7fa8b63272472af6b8a1387e6b0f6c5fd47b451abb6e1c22729056

  • SHA512

    940dcd7c79231f662fef11cedd7c88ad3104a79151e4875b395f4fb452b98a3f9c794af4639c87872689a3939eba415978775ef5f18ea9f35ed7431a5baeda25

  • SSDEEP

    3072:EbIl2rZjfa15tdh/ndlV36GuNmPpumAQOqzXczN:EbIatfaTh/ngwumAQOqzczN

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

185.172.114.157:61915

Targets

    • Target

      e568228e13b2c13e588ecd266dae9b0c.elf

    • Size

      109KB

    • MD5

      e568228e13b2c13e588ecd266dae9b0c

    • SHA1

      6bbc91bed773d2e03cb3a10e9d881b507e48795a

    • SHA256

      d7aab89fdf7fa8b63272472af6b8a1387e6b0f6c5fd47b451abb6e1c22729056

    • SHA512

      940dcd7c79231f662fef11cedd7c88ad3104a79151e4875b395f4fb452b98a3f9c794af4639c87872689a3939eba415978775ef5f18ea9f35ed7431a5baeda25

    • SSDEEP

      3072:EbIl2rZjfa15tdh/ndlV36GuNmPpumAQOqzXczN:EbIatfaTh/ngwumAQOqzczN

    Score
    7/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    • Reads system network configuration

      Uses contents of /proc filesystem to enumerate network settings.

MITRE ATT&CK Enterprise v6

Tasks