Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

635843bec1...730a45

ubuntu-18.04-amd64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    635843bec1b3ab6699c6744be1730a45

  • Size

    134KB

  • Sample

    231219-3ef8lsfadp

  • MD5

    635843bec1b3ab6699c6744be1730a45

  • SHA1

    5bb57e9064173f51ba2f596dbc3e5d3cc561b4d1

  • SHA256

    03c9e68196537e4a7faf624c13888aa5dde2df4701bda412942f63589e7f31fc

  • SHA512

    42d52ed85b74a7c49696391e86b713f37a587a54667f23ce9b9c3ddfb6f20d821b9d6d2780874345a23e61f3b580b23f359dd1cbe11f9b128d66765043914d91

  • SSDEEP

    3072:i1g9onCtpDE6gsrrd7et1m66AutJ8a+PQ4KQOjsz4FTjRGTJeAomcBfG3SggW:HE6gi7OwSutJ8a+PQ46A7NeAomcBO3Ss

Score
10/10
gafgytlinux

Malware Config

Extracted

Family

gafgyt

C2

142.93.123.195:23

Targets

    • Target

      635843bec1b3ab6699c6744be1730a45

    • Size

      134KB

    • MD5

      635843bec1b3ab6699c6744be1730a45

    • SHA1

      5bb57e9064173f51ba2f596dbc3e5d3cc561b4d1

    • SHA256

      03c9e68196537e4a7faf624c13888aa5dde2df4701bda412942f63589e7f31fc

    • SHA512

      42d52ed85b74a7c49696391e86b713f37a587a54667f23ce9b9c3ddfb6f20d821b9d6d2780874345a23e61f3b580b23f359dd1cbe11f9b128d66765043914d91

    • SSDEEP

      3072:i1g9onCtpDE6gsrrd7et1m66AutJ8a+PQ4KQOjsz4FTjRGTJeAomcBfG3SggW:HE6gi7OwSutJ8a+PQ46A7NeAomcBO3Ss

    Score
    7/10

    • Changes its process name

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks