Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    132792120b1dcad06a5e03810bea8bf4.elf.bin

  • Size

    83KB

  • Sample

    230511-w7n1lahc23

  • MD5

    132792120b1dcad06a5e03810bea8bf4

  • SHA1

    1f3fac7d9bfc444cc6da3d03eed23fe26ed74cc2

  • SHA256

    6ee28dfd9129e8e996e4331def0f5f1878c96a9686b6f87b4e3b0ac4f2ea2670

  • SHA512

    4cdc6136cf3de0b40fc36cf08d0498248c178303c65828f48b558b05729f86119e357a5b1dfc0c53b01fdc8ccf2f8a1206c82cb51e37ea62239479cf26ddbda9

  • SSDEEP

    1536:W35b9Vc4N3J6lreu5r4hWj8LFxwfhcVmF+wVOz+sXcfW7k:Ab9Vc4JJ6liuq0YBxwfhcVmEwVOz+ucx

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

209.126.1.176:1112

Targets

    • Target

      132792120b1dcad06a5e03810bea8bf4.elf.bin

    • Size

      83KB

    • MD5

      132792120b1dcad06a5e03810bea8bf4

    • SHA1

      1f3fac7d9bfc444cc6da3d03eed23fe26ed74cc2

    • SHA256

      6ee28dfd9129e8e996e4331def0f5f1878c96a9686b6f87b4e3b0ac4f2ea2670

    • SHA512

      4cdc6136cf3de0b40fc36cf08d0498248c178303c65828f48b558b05729f86119e357a5b1dfc0c53b01fdc8ccf2f8a1206c82cb51e37ea62239479cf26ddbda9

    • SSDEEP

      1536:W35b9Vc4N3J6lreu5r4hWj8LFxwfhcVmF+wVOz+sXcfW7k:Ab9Vc4JJ6liuq0YBxwfhcVmEwVOz+ucx

    Score
    7/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    • Reads system network configuration

      Uses contents of /proc filesystem to enumerate network settings.

MITRE ATT&CK Enterprise v6

Tasks