Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

800e7ecf8c...fd942f

ubuntu-18.04-amd64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    800e7ecf8c4a6432e777ec9253fd942f

  • Size

    153KB

  • Sample

    231220-dvb66adaa6

  • MD5

    800e7ecf8c4a6432e777ec9253fd942f

  • SHA1

    5404ddef3099a7a370ba46687a452c05e688afb1

  • SHA256

    f0d62fa6a30d423ec25d5e42776fc52f90b178c25a28ec14177f1f5a2d0ec8ca

  • SHA512

    24e34486429d632f3f5ca56b959d7d9b7730daa4c782e9eabb2dcfc90f2c6818523d1d7c922795684624f4038ad3dfe98e0bfbd426c384f522e2e6a87e3f5b22

  • SSDEEP

    3072:XlEoRSgLyZrVvnNYd+soZS9BFGOlV5BZ8fR1c9OXH90PfNatph1:X6oR5+qwS9BFFlhK51ckXH90PfNatph1

Score
10/10
gafgytlinux

Malware Config

Extracted

Family

gafgyt

C2

45.95.147.69:812

Targets

    • Target

      800e7ecf8c4a6432e777ec9253fd942f

    • Size

      153KB

    • MD5

      800e7ecf8c4a6432e777ec9253fd942f

    • SHA1

      5404ddef3099a7a370ba46687a452c05e688afb1

    • SHA256

      f0d62fa6a30d423ec25d5e42776fc52f90b178c25a28ec14177f1f5a2d0ec8ca

    • SHA512

      24e34486429d632f3f5ca56b959d7d9b7730daa4c782e9eabb2dcfc90f2c6818523d1d7c922795684624f4038ad3dfe98e0bfbd426c384f522e2e6a87e3f5b22

    • SSDEEP

      3072:XlEoRSgLyZrVvnNYd+soZS9BFGOlV5BZ8fR1c9OXH90PfNatph1:X6oR5+qwS9BFFlhK51ckXH90PfNatph1

    Score
    7/10

    • Changes its process name

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks