Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2c7cea0349...cbb14d

debian-9-armhf

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2c7cea0349edc9616b8e41e902cbb14d

  • Size

    168KB

  • Sample

    231219-2sbdvahab5

  • MD5

    2c7cea0349edc9616b8e41e902cbb14d

  • SHA1

    3d47825c9b15e78d632bdf99dc0d9ac2a9a4f5fb

  • SHA256

    88f876017b9e5b8b639da0a465c68c343d9061563b5ecc5f2722e43c9946b674

  • SHA512

    940ce8ec3a94d7cb2bbdf67d5c7682fdceb86eebad78662576058cc6369717a5e12c28f8fa1bdac992e43b7dee60c2a9e1d77d41ed2c49b7ee56697c26ab4bb9

  • SSDEEP

    3072:cTSMGRopVpweQ+x+mikaW8uOLGArPqiqZTetJ8add9QzhsR8PwPWmaF2RYNmyUQs:0x+mraJu1CqisetJ8addQ48PwPWmomys

Score
10/10
gafgyt

Malware Config

Extracted

Family

gafgyt

C2

185.244.25.248:252

Targets

    • Target

      2c7cea0349edc9616b8e41e902cbb14d

    • Size

      168KB

    • MD5

      2c7cea0349edc9616b8e41e902cbb14d

    • SHA1

      3d47825c9b15e78d632bdf99dc0d9ac2a9a4f5fb

    • SHA256

      88f876017b9e5b8b639da0a465c68c343d9061563b5ecc5f2722e43c9946b674

    • SHA512

      940ce8ec3a94d7cb2bbdf67d5c7682fdceb86eebad78662576058cc6369717a5e12c28f8fa1bdac992e43b7dee60c2a9e1d77d41ed2c49b7ee56697c26ab4bb9

    • SSDEEP

      3072:cTSMGRopVpweQ+x+mikaW8uOLGArPqiqZTetJ8add9QzhsR8PwPWmaF2RYNmyUQs:0x+mraJu1CqisetJ8addQ48PwPWmomys

    Score
    7/10

    • Changes its process name

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks