Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

6575a9fb68...9ac02f

debian-9-armhf

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6575a9fb6879b6004b81f619989ac02f

  • Size

    132KB

  • Sample

    231219-3e8b4afdcn

  • MD5

    6575a9fb6879b6004b81f619989ac02f

  • SHA1

    3da3beb7d27552c70ae2b421bbdb48fff2cb3a3f

  • SHA256

    44d00046401e6b1656e73d60445b5ea1d25c503dfae9997c8dbe1158a9d312ac

  • SHA512

    5322893a13f428b818aa95e0d3fdc41bcb56e0cab18590dcf057dd574d9612b719c60ce53cc37daccf71a6aa7b32250a928d409889f071aad68f7316265ac485

  • SSDEEP

    3072:e9AS8f554Thdn37awEAh8+setJ8au49QuhsbuvsCvg2S1XxyCQ6rAGFQpXW:pwO+setJ8au4l/LvsXxyCQ6rzFQpXW

Score
10/10
gafgyt

Malware Config

Extracted

Family

gafgyt

C2

209.97.190.164:23

Targets

    • Target

      6575a9fb6879b6004b81f619989ac02f

    • Size

      132KB

    • MD5

      6575a9fb6879b6004b81f619989ac02f

    • SHA1

      3da3beb7d27552c70ae2b421bbdb48fff2cb3a3f

    • SHA256

      44d00046401e6b1656e73d60445b5ea1d25c503dfae9997c8dbe1158a9d312ac

    • SHA512

      5322893a13f428b818aa95e0d3fdc41bcb56e0cab18590dcf057dd574d9612b719c60ce53cc37daccf71a6aa7b32250a928d409889f071aad68f7316265ac485

    • SSDEEP

      3072:e9AS8f554Thdn37awEAh8+setJ8au49QuhsbuvsCvg2S1XxyCQ6rAGFQpXW:pwO+setJ8au4l/LvsXxyCQ6rzFQpXW

    Score
    7/10

    • Changes its process name

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks