Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

28b40aeda0...c23ffa

ubuntu-18.04-amd64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    28b40aeda006c7db6163322527c23ffa

  • Size

    97KB

  • Sample

    231219-2qxt3adack

  • MD5

    28b40aeda006c7db6163322527c23ffa

  • SHA1

    a5bf0922fa968b36c24b65b73789125f22f4400a

  • SHA256

    ceaaa5202447398b44d1c6cc49797c7282189cc259f60def60e901a64d25f718

  • SHA512

    5cb52e404b95489d089267e7045c1c053c5be0f05d8919343028d0acdfdc1b9d9837253ff1e03be8c2a7e961199fdfc36f048f4e39b41e2eebf480bc4922c097

  • SSDEEP

    3072:Ii8yJhl24T5wbIhHsFRvW5hdcPbE37K8N2Ur3e:7nfVRqRvW5hdcPbE37K8N2Ur3e

Score
10/10
gafgytlinux

Malware Config

Extracted

Family

gafgyt

C2

86.105.52.202:23

Targets

    • Target

      28b40aeda006c7db6163322527c23ffa

    • Size

      97KB

    • MD5

      28b40aeda006c7db6163322527c23ffa

    • SHA1

      a5bf0922fa968b36c24b65b73789125f22f4400a

    • SHA256

      ceaaa5202447398b44d1c6cc49797c7282189cc259f60def60e901a64d25f718

    • SHA512

      5cb52e404b95489d089267e7045c1c053c5be0f05d8919343028d0acdfdc1b9d9837253ff1e03be8c2a7e961199fdfc36f048f4e39b41e2eebf480bc4922c097

    • SSDEEP

      3072:Ii8yJhl24T5wbIhHsFRvW5hdcPbE37K8N2Ur3e:7nfVRqRvW5hdcPbE37K8N2Ur3e

    Score
    7/10

    • Changes its process name

    • Deletes itself

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks