Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    747e5cc8989fdba0b9f94ea629163c38

  • Size

    70KB

  • Sample

    231220-arfhmaehe7

  • MD5

    747e5cc8989fdba0b9f94ea629163c38

  • SHA1

    1862152fefa9f0056e2b1ef35900065d62c7a9fd

  • SHA256

    889f92f922def602f011d3a7fe36edaae5dea0d3ee8422d1fe90668c7f2b42d9

  • SHA512

    08ba52b5439981b5fe256c159a622aa0c6270ccbc009a7f0286db2b37a2bfc618edc7c7e87d2e1b57ad0d77c5de2867afaf1eaecbc68f8186ff859780efe763c

  • SSDEEP

    1536:WWdY0wj/NQ27qLfEg8ZW087dZPmF+lVOCjUxfg71:c0wj/C2GLfcsb5ZPmElVOCAxfg71

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

178.128.32.9:23

Targets

    • Target

      747e5cc8989fdba0b9f94ea629163c38

    • Size

      70KB

    • MD5

      747e5cc8989fdba0b9f94ea629163c38

    • SHA1

      1862152fefa9f0056e2b1ef35900065d62c7a9fd

    • SHA256

      889f92f922def602f011d3a7fe36edaae5dea0d3ee8422d1fe90668c7f2b42d9

    • SHA512

      08ba52b5439981b5fe256c159a622aa0c6270ccbc009a7f0286db2b37a2bfc618edc7c7e87d2e1b57ad0d77c5de2867afaf1eaecbc68f8186ff859780efe763c

    • SSDEEP

      1536:WWdY0wj/NQ27qLfEg8ZW087dZPmF+lVOCjUxfg71:c0wj/C2GLfcsb5ZPmElVOCAxfg71

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks