Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    517400d4bbf1d9f488fb13b4dd49aed4

  • Size

    75KB

  • Sample

    231219-27x66afaf7

  • MD5

    517400d4bbf1d9f488fb13b4dd49aed4

  • SHA1

    c6b6cb7ba6e78deda23e969231da8fa4f8c76d81

  • SHA256

    4e89c471bbaf1ab8071dda2478a0ccfa0bd7b947a2a000eb1f5ddf40ecff9146

  • SHA512

    01f796d6f103d6740656a7e90f4a15f2898c8a73910108bfb3fee7e0ce0ef13fcae40ce57a654abebadb26d7a7fb7262af46f53851d596c2b0ac2fde6780976e

  • SSDEEP

    1536:H1W3PjHA8s0q9pAgwxEWZQWWBKVBgBc72md+oVcxjnxj5a1:cjHAvD9pAgwtKkz2mMoVcxjxj5a1

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

136.144.200.209:4599

Targets

    • Target

      517400d4bbf1d9f488fb13b4dd49aed4

    • Size

      75KB

    • MD5

      517400d4bbf1d9f488fb13b4dd49aed4

    • SHA1

      c6b6cb7ba6e78deda23e969231da8fa4f8c76d81

    • SHA256

      4e89c471bbaf1ab8071dda2478a0ccfa0bd7b947a2a000eb1f5ddf40ecff9146

    • SHA512

      01f796d6f103d6740656a7e90f4a15f2898c8a73910108bfb3fee7e0ce0ef13fcae40ce57a654abebadb26d7a7fb7262af46f53851d596c2b0ac2fde6780976e

    • SSDEEP

      1536:H1W3PjHA8s0q9pAgwxEWZQWWBKVBgBc72md+oVcxjnxj5a1:cjHAvD9pAgwtKkz2mMoVcxjxj5a1

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks