Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

5e5b387a9b...9b02cb

debian-9-armhf

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5e5b387a9bb84d7de6528524839b02cb

  • Size

    90KB

  • Sample

    231219-3clqbaebcq

  • MD5

    5e5b387a9bb84d7de6528524839b02cb

  • SHA1

    9d69c2cd6d63521af8ea9ab01c0f57b9be8bdfee

  • SHA256

    d7d04320b411567c331b365fe1dd3d60a083a82a503f54cd1f2ac182bfe44cc3

  • SHA512

    a4a0f803b2e9945ebf7f21b9a11a872c5daf89286d368d4437a5892be716a824d3a93159d75fc3277bcb52773f1aee814501ab61a1cbf2dc9e5d39cf1eae3e4f

  • SSDEEP

    1536:LBkF9VQPAGaHYyEfgcqpq1innPTxHOxmePczYrmREqQ4b/X7XSee:OQ2HYBv1WTbePcKmREqQ4bv7XSee

Score
10/10
gafgyt

Malware Config

Extracted

Family

gafgyt

C2

192.99.167.213:420

Targets

    • Target

      5e5b387a9bb84d7de6528524839b02cb

    • Size

      90KB

    • MD5

      5e5b387a9bb84d7de6528524839b02cb

    • SHA1

      9d69c2cd6d63521af8ea9ab01c0f57b9be8bdfee

    • SHA256

      d7d04320b411567c331b365fe1dd3d60a083a82a503f54cd1f2ac182bfe44cc3

    • SHA512

      a4a0f803b2e9945ebf7f21b9a11a872c5daf89286d368d4437a5892be716a824d3a93159d75fc3277bcb52773f1aee814501ab61a1cbf2dc9e5d39cf1eae3e4f

    • SSDEEP

      1536:LBkF9VQPAGaHYyEfgcqpq1innPTxHOxmePczYrmREqQ4b/X7XSee:OQ2HYBv1WTbePcKmREqQ4bv7XSee

    Score
    6/10

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks