Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    688a985d75e80909f96e7724b5eee121

  • Size

    108KB

  • Sample

    231219-3gcyzafhen

  • MD5

    688a985d75e80909f96e7724b5eee121

  • SHA1

    a2eb98c92eb73b0214d9542a1bf3f242c0634db5

  • SHA256

    54476f3c59642eec25e8c1d1029ba44a5cb266432bd77d8213d5a2cc87432f2d

  • SHA512

    08d5e0667d37aa9f289b571c0c3cf7c4bd75791629c94643d6490d6a8304267f59b61c5bceb353d5f2d97fbd3a4299fc16acf309d6fbce754d9c1ed07a5e148f

  • SSDEEP

    3072:b6an17WtsWhdgYJw0D6mbPbmTQOWsXAOn:Wan17WPJw0D6ibmTQOWCAOn

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

80.211.172.24:818

Targets

    • Target

      688a985d75e80909f96e7724b5eee121

    • Size

      108KB

    • MD5

      688a985d75e80909f96e7724b5eee121

    • SHA1

      a2eb98c92eb73b0214d9542a1bf3f242c0634db5

    • SHA256

      54476f3c59642eec25e8c1d1029ba44a5cb266432bd77d8213d5a2cc87432f2d

    • SHA512

      08d5e0667d37aa9f289b571c0c3cf7c4bd75791629c94643d6490d6a8304267f59b61c5bceb353d5f2d97fbd3a4299fc16acf309d6fbce754d9c1ed07a5e148f

    • SSDEEP

      3072:b6an17WtsWhdgYJw0D6mbPbmTQOWsXAOn:Wan17WPJw0D6ibmTQOWCAOn

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks