Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    49a1c4935a12f4bf9b04922679e4168e

  • Size

    72KB

  • Sample

    231219-247anadgc5

  • MD5

    49a1c4935a12f4bf9b04922679e4168e

  • SHA1

    37a8f23bc4815e62fed7f2742921858a43eae7ee

  • SHA256

    2bc840e7c9bf94a36d447e91eb2e2923d9e1a6e5e66245ef949480ca90576dd4

  • SHA512

    9c339c31e8c36e400c5c05e26da9ef64b513eba59d5656a02a5085ff56f8b45323c3f9748e2b95023636e3a660a13530599b95808098aa1c5fad02bcacf78444

  • SSDEEP

    1536:Lmqc5p0QWiKLoxKFn6pD+OTxzMUImLI2VOCjXUfJRk:g5pOr0xKFn6J+OnImU2VOCbUfJRk

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

173.232.146.170:4849

Targets

    • Target

      49a1c4935a12f4bf9b04922679e4168e

    • Size

      72KB

    • MD5

      49a1c4935a12f4bf9b04922679e4168e

    • SHA1

      37a8f23bc4815e62fed7f2742921858a43eae7ee

    • SHA256

      2bc840e7c9bf94a36d447e91eb2e2923d9e1a6e5e66245ef949480ca90576dd4

    • SHA512

      9c339c31e8c36e400c5c05e26da9ef64b513eba59d5656a02a5085ff56f8b45323c3f9748e2b95023636e3a660a13530599b95808098aa1c5fad02bcacf78444

    • SSDEEP

      1536:Lmqc5p0QWiKLoxKFn6pD+OTxzMUImLI2VOCjXUfJRk:g5pOr0xKFn6J+OnImU2VOCbUfJRk

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks