Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    283c068978e2b7239ffb4eba8328d4e3

  • Size

    80KB

  • Sample

    231219-2qrcaachfp

  • MD5

    283c068978e2b7239ffb4eba8328d4e3

  • SHA1

    7bc5b7b4b89cb63cb4eee30c2c1818b0e13b9319

  • SHA256

    609798a36b1a3555d3667243ad74cc368c4a3a53667029d2c58717ab2bb77141

  • SHA512

    d09e7e418b02203054489dc9ae08f0f53b726413f2829897fa9af8a1eeb78720d3a4879bf651943a583ba8f63e05f6e82d234a708d269ac80bd96e42950e784a

  • SSDEEP

    1536:c78nEYCEGS1l345pdSuGS36lDGvtYEhmA+JWOVjhHZ4xX:ScCEGS1ZqYuGO6l4t/hm/JWOVtHZ4xX

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

138.197.99.186:666

Targets

    • Target

      283c068978e2b7239ffb4eba8328d4e3

    • Size

      80KB

    • MD5

      283c068978e2b7239ffb4eba8328d4e3

    • SHA1

      7bc5b7b4b89cb63cb4eee30c2c1818b0e13b9319

    • SHA256

      609798a36b1a3555d3667243ad74cc368c4a3a53667029d2c58717ab2bb77141

    • SHA512

      d09e7e418b02203054489dc9ae08f0f53b726413f2829897fa9af8a1eeb78720d3a4879bf651943a583ba8f63e05f6e82d234a708d269ac80bd96e42950e784a

    • SSDEEP

      1536:c78nEYCEGS1l345pdSuGS36lDGvtYEhmA+JWOVjhHZ4xX:ScCEGS1ZqYuGO6l4t/hm/JWOVtHZ4xX

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks