Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    7586b23cdc4195d299eedde0375d2bcc

  • Size

    184KB

  • Sample

    231220-ax12hsfed5

  • MD5

    7586b23cdc4195d299eedde0375d2bcc

  • SHA1

    0debb385536049fdb93ce081c3be2fe589b458ae

  • SHA256

    eb5255b8eb88ce29bb3e13bc5c794bab2a347ecbba0e90c4296deaf31269c67d

  • SHA512

    f919564f89c3d04aba199dde86baad0d7729158335264069209d515163d8f5a64404d38243d4cf78467f21216c1bc165f495f3a969153181f3d9e6f1d9fea517

  • SSDEEP

    3072:BhG4IGXq11zXqwL5S5NZf1t3aLUUGPNZibtNf8eNgJs12Zhvc5PsEsEUxxQLzJlM:BUPzfkn9D8xrbY11EoO5Dt0DR1M4X

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

206.189.68.108:23

Targets

    • Target

      7586b23cdc4195d299eedde0375d2bcc

    • Size

      184KB

    • MD5

      7586b23cdc4195d299eedde0375d2bcc

    • SHA1

      0debb385536049fdb93ce081c3be2fe589b458ae

    • SHA256

      eb5255b8eb88ce29bb3e13bc5c794bab2a347ecbba0e90c4296deaf31269c67d

    • SHA512

      f919564f89c3d04aba199dde86baad0d7729158335264069209d515163d8f5a64404d38243d4cf78467f21216c1bc165f495f3a969153181f3d9e6f1d9fea517

    • SSDEEP

      3072:BhG4IGXq11zXqwL5S5NZf1t3aLUUGPNZibtNf8eNgJs12Zhvc5PsEsEUxxQLzJlM:BUPzfkn9D8xrbY11EoO5Dt0DR1M4X

    Score
    7/10
    • Changes its process name

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks