Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    8c99fa22b92f842fb015aa15ad656228

  • Size

    92KB

  • Sample

    231220-hhetqsgbgl

  • MD5

    8c99fa22b92f842fb015aa15ad656228

  • SHA1

    53b1eb188823ff55586ff4a87b738bb24bbd22b4

  • SHA256

    c116f0db081cdb1f3fc34bba8a4fa136c969bef824d3953ea588a0b5b67a460a

  • SHA512

    ed4aa95c2bb444f56338a8b0ccf190bb32117bc813cddfefe050d6783ebc9404fa0af9d6d47df5250070b62f56eab41a7473b53c1a62317462b3f990dac3602a

  • SSDEEP

    1536:0yXDP3ZhUNUPXPKmY5aC/Qdk5cc/z4d7J2cNU5mZ5hpo7w882PM37K8PN2UrYe:vXj7UNUPX5Y5JQdScc7M7JFp5hp4w88F

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

206.189.200.115:443

Targets

    • Target

      8c99fa22b92f842fb015aa15ad656228

    • Size

      92KB

    • MD5

      8c99fa22b92f842fb015aa15ad656228

    • SHA1

      53b1eb188823ff55586ff4a87b738bb24bbd22b4

    • SHA256

      c116f0db081cdb1f3fc34bba8a4fa136c969bef824d3953ea588a0b5b67a460a

    • SHA512

      ed4aa95c2bb444f56338a8b0ccf190bb32117bc813cddfefe050d6783ebc9404fa0af9d6d47df5250070b62f56eab41a7473b53c1a62317462b3f990dac3602a

    • SSDEEP

      1536:0yXDP3ZhUNUPXPKmY5aC/Qdk5cc/z4d7J2cNU5mZ5hpo7w882PM37K8PN2UrYe:vXj7UNUPX5Y5JQdScc7M7JFp5hp4w88F

    Score
    7/10
    • Changes its process name

    • Deletes itself

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks