Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
85a70a197afdf487ed24e354b8d2d174
-
Size
184KB
-
Sample
231220-flbkdafgg6
-
MD5
85a70a197afdf487ed24e354b8d2d174
-
SHA1
787f0588e09789fab3172a0e51280c8e0a74bf2f
-
SHA256
dbfd4095f388e9efdf300e37e6a4a397b7f8713ecffcdcd4d241dcc05b0a680a
-
SHA512
e6537716639a102e03198bba1dd262e0c3a0a73ec97fdd0317b79578d3402146b096e0fcea1cc7d7001594dbcaa0a09f34fdb7e8d235dc8b28a6af3834cb3752
-
SSDEEP
3072:XWn4fGXq11zXqwL5SKNZf1t3aLUUGPNCibtNf8eNgJs12Ohvc5PsEsEUxxQLgJlT:X6hvUBl9hObA5QXoO5Dt0DR1M4X
Behavioral task
behavioral1
Sample
85a70a197afdf487ed24e354b8d2d174
Resource
debian9-armhf-20231215-en
Malware Config
Extracted
gafgyt
78.142.19.81:23
Targets
-
-
Target
85a70a197afdf487ed24e354b8d2d174
-
Size
184KB
-
MD5
85a70a197afdf487ed24e354b8d2d174
-
SHA1
787f0588e09789fab3172a0e51280c8e0a74bf2f
-
SHA256
dbfd4095f388e9efdf300e37e6a4a397b7f8713ecffcdcd4d241dcc05b0a680a
-
SHA512
e6537716639a102e03198bba1dd262e0c3a0a73ec97fdd0317b79578d3402146b096e0fcea1cc7d7001594dbcaa0a09f34fdb7e8d235dc8b28a6af3834cb3752
-
SSDEEP
3072:XWn4fGXq11zXqwL5SKNZf1t3aLUUGPNCibtNf8eNgJs12Ohvc5PsEsEUxxQLgJlT:X6hvUBl9hObA5QXoO5Dt0DR1M4X
Score7/10-
Changes its process name
-
Reads system routing table
Gets active network interfaces from /proc virtual filesystem.
-