Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

85a70a197a...d2d174

debian-9-armhf

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    85a70a197afdf487ed24e354b8d2d174

  • Size

    184KB

  • Sample

    231220-flbkdafgg6

  • MD5

    85a70a197afdf487ed24e354b8d2d174

  • SHA1

    787f0588e09789fab3172a0e51280c8e0a74bf2f

  • SHA256

    dbfd4095f388e9efdf300e37e6a4a397b7f8713ecffcdcd4d241dcc05b0a680a

  • SHA512

    e6537716639a102e03198bba1dd262e0c3a0a73ec97fdd0317b79578d3402146b096e0fcea1cc7d7001594dbcaa0a09f34fdb7e8d235dc8b28a6af3834cb3752

  • SSDEEP

    3072:XWn4fGXq11zXqwL5SKNZf1t3aLUUGPNCibtNf8eNgJs12Ohvc5PsEsEUxxQLgJlT:X6hvUBl9hObA5QXoO5Dt0DR1M4X

Score
10/10
gafgyt

Malware Config

Extracted

Family

gafgyt

C2

78.142.19.81:23

Targets

    • Target

      85a70a197afdf487ed24e354b8d2d174

    • Size

      184KB

    • MD5

      85a70a197afdf487ed24e354b8d2d174

    • SHA1

      787f0588e09789fab3172a0e51280c8e0a74bf2f

    • SHA256

      dbfd4095f388e9efdf300e37e6a4a397b7f8713ecffcdcd4d241dcc05b0a680a

    • SHA512

      e6537716639a102e03198bba1dd262e0c3a0a73ec97fdd0317b79578d3402146b096e0fcea1cc7d7001594dbcaa0a09f34fdb7e8d235dc8b28a6af3834cb3752

    • SSDEEP

      3072:XWn4fGXq11zXqwL5SKNZf1t3aLUUGPNCibtNf8eNgJs12Ohvc5PsEsEUxxQLgJlT:X6hvUBl9hObA5QXoO5Dt0DR1M4X

    Score
    7/10

    • Changes its process name

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks