Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

15fa2ce399...0953ef

debian-9-mipsel

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    15fa2ce3991607a73c6a27332f0953ef

  • Size

    147KB

  • Sample

    231219-2htsfadbc3

  • MD5

    15fa2ce3991607a73c6a27332f0953ef

  • SHA1

    0b7c95ad99b0ee5f9bbe73b1c8c73efd74ffb9d5

  • SHA256

    7a0d812bf848d6bcfe2cd969b838692b3fe74b875b06344b252d16d9e2a9518f

  • SHA512

    7abcaf997b21228b17849a90f989f8288fdac363350707c6f0be01130b65ac5f1604d7fdbdad869dd899f76f4279cda79b4a02533a4d214dfe966317bf60f6b7

  • SSDEEP

    3072:zmpDghqvUKYuJCGC4ef253rMGVR7zIj1jr:zmpDghqhVJCGC4efQ3rMGVR7zIj1jr

Score
10/10
gafgyt

Malware Config

Extracted

Family

gafgyt

C2

104.244.77.36:871

Targets

    • Target

      15fa2ce3991607a73c6a27332f0953ef

    • Size

      147KB

    • MD5

      15fa2ce3991607a73c6a27332f0953ef

    • SHA1

      0b7c95ad99b0ee5f9bbe73b1c8c73efd74ffb9d5

    • SHA256

      7a0d812bf848d6bcfe2cd969b838692b3fe74b875b06344b252d16d9e2a9518f

    • SHA512

      7abcaf997b21228b17849a90f989f8288fdac363350707c6f0be01130b65ac5f1604d7fdbdad869dd899f76f4279cda79b4a02533a4d214dfe966317bf60f6b7

    • SSDEEP

      3072:zmpDghqvUKYuJCGC4ef253rMGVR7zIj1jr:zmpDghqhVJCGC4efQ3rMGVR7zIj1jr

    Score
    7/10

    • Changes its process name

    • Deletes itself

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks