Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    6806ab3e23c595db94ccaa1c239da207.elf

  • Size

    205KB

  • Sample

    230508-vqvalsbg76

  • MD5

    6806ab3e23c595db94ccaa1c239da207

  • SHA1

    06fad3d49ffdba791a0913b292dab4e51e9247db

  • SHA256

    2d204e0a17b9333d2b5d60a01cc57e0398cfa08d3ac5544b76962f8e8b524980

  • SHA512

    0a3cbd1f5aad93daf33ef5c1b93b8600241f4304475a2b50365745cd674e05fd7985edb32af9b79e1b53566c4886427a4486503a9350a7fc3745b915a89339ae

  • SSDEEP

    3072:mRosx4mz0wygRKvi1av0Y6JlJgvIfus+qwqEi5gfRFsFnkNvcFoV/KAv4hkFLnn0:mRoTSMQCa5StCDcSIpPMmyW49QjSx

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

101.99.91.77:812

Targets

    • Target

      6806ab3e23c595db94ccaa1c239da207.elf

    • Size

      205KB

    • MD5

      6806ab3e23c595db94ccaa1c239da207

    • SHA1

      06fad3d49ffdba791a0913b292dab4e51e9247db

    • SHA256

      2d204e0a17b9333d2b5d60a01cc57e0398cfa08d3ac5544b76962f8e8b524980

    • SHA512

      0a3cbd1f5aad93daf33ef5c1b93b8600241f4304475a2b50365745cd674e05fd7985edb32af9b79e1b53566c4886427a4486503a9350a7fc3745b915a89339ae

    • SSDEEP

      3072:mRosx4mz0wygRKvi1av0Y6JlJgvIfus+qwqEi5gfRFsFnkNvcFoV/KAv4hkFLnn0:mRoTSMQCa5StCDcSIpPMmyW49QjSx

    Score
    7/10
    • Changes its process name

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    • Reads system network configuration

      Uses contents of /proc filesystem to enumerate network settings.

MITRE ATT&CK Enterprise v6

Tasks