Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

261d8f4e9e...b5e790

ubuntu-18.04-amd64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    261d8f4e9ec0c3c0f6c97f106eb5e790

  • Size

    78KB

  • Sample

    231219-2pzbhacehn

  • MD5

    261d8f4e9ec0c3c0f6c97f106eb5e790

  • SHA1

    0f9fe82ba65e12cf63117abba98e073963820f65

  • SHA256

    9ccbbb2929e1e1ad5c32e0ba03f4dfabef6ef3ef8e1e01a141addd2f65c6c5ab

  • SHA512

    f6dcdfe4f182cbb0e6300a0d6013710439ba965244d042f030e3d3f7ec9f3e280a3776bd1da278f53e07c5c8d563f402cf103139e355507878004e79b223d432

  • SSDEEP

    1536:Aobk9t5sPrPVj6WH3/apHoksvKwwOEReg4BsKhWH88d66666/lm8E1V8zlimP+lJ:mt5sPrPVj6WH3/SkvzwOEReh0cJlI7m2

Score
10/10
gafgytlinux

Malware Config

Extracted

Family

gafgyt

C2

205.185.124.211:1994

Targets

    • Target

      261d8f4e9ec0c3c0f6c97f106eb5e790

    • Size

      78KB

    • MD5

      261d8f4e9ec0c3c0f6c97f106eb5e790

    • SHA1

      0f9fe82ba65e12cf63117abba98e073963820f65

    • SHA256

      9ccbbb2929e1e1ad5c32e0ba03f4dfabef6ef3ef8e1e01a141addd2f65c6c5ab

    • SHA512

      f6dcdfe4f182cbb0e6300a0d6013710439ba965244d042f030e3d3f7ec9f3e280a3776bd1da278f53e07c5c8d563f402cf103139e355507878004e79b223d432

    • SSDEEP

      1536:Aobk9t5sPrPVj6WH3/apHoksvKwwOEReg4BsKhWH88d66666/lm8E1V8zlimP+lJ:mt5sPrPVj6WH3/SkvzwOEReh0cJlI7m2

    Score
    6/10

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks