Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    885ca300b9e1a5c3e546082eb913d55f

  • Size

    147KB

  • Sample

    231220-gcbdpahbh8

  • MD5

    885ca300b9e1a5c3e546082eb913d55f

  • SHA1

    ac354947aaa792087d3d179eea024e8540a41537

  • SHA256

    95424b9917e28a4e25dcd3d0f72a38e41590d9d126655e52bcca59e2409517fd

  • SHA512

    e2937d1dcf0dd0efe0b8d6db21cee9a5fcbaf5c229fbde193bd0b450264615504b0324aa0c598cc36c0a5ad720930008136931f49754d72a9feacf6722ccdf6b

  • SSDEEP

    3072:jXSJRLX5Z953MNaNBkB/N6uNQ8M/9YDppN1mQwfCcQMAN:DSJRLP9BMNa8hN6ajM/9YDptmQwfCzMq

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

87.236.212.240:666

Targets

    • Target

      885ca300b9e1a5c3e546082eb913d55f

    • Size

      147KB

    • MD5

      885ca300b9e1a5c3e546082eb913d55f

    • SHA1

      ac354947aaa792087d3d179eea024e8540a41537

    • SHA256

      95424b9917e28a4e25dcd3d0f72a38e41590d9d126655e52bcca59e2409517fd

    • SHA512

      e2937d1dcf0dd0efe0b8d6db21cee9a5fcbaf5c229fbde193bd0b450264615504b0324aa0c598cc36c0a5ad720930008136931f49754d72a9feacf6722ccdf6b

    • SSDEEP

      3072:jXSJRLX5Z953MNaNBkB/N6uNQ8M/9YDppN1mQwfCcQMAN:DSJRLP9BMNa8hN6ajM/9YDptmQwfCzMq

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks