Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

9a61d6fcfc...5c4678

ubuntu-18.04-amd64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9a61d6fcfca21f982b3393f4575c4678

  • Size

    130KB

  • Sample

    231220-k36jaseceq

  • MD5

    9a61d6fcfca21f982b3393f4575c4678

  • SHA1

    aa017aa2784b1dbcd69fd02a2a390ee9de8ce376

  • SHA256

    9c3d1e9ddac080486e0211897439a141b11d895b5426f54beb9c2c7843214ebf

  • SHA512

    5337efb40a40f645eab8db0717eca5792745286b59fe5256e712460c5bafc7cdfbb408de74209054b825673a79f743164ab9ee706827e4fd9a47922ed9ae5a7d

  • SSDEEP

    3072:Z4GkT9NELcmIq85MSZXM/f7vVetJ8add9QzTsjxFELRWRg47KcX6GcgqBK:Z4lTj0AwH7vVetJ8addQmoWRg47KcXJH

Score
10/10
gafgytlinux

Malware Config

Extracted

Family

gafgyt

C2

46.29.163.204:323

Targets

    • Target

      9a61d6fcfca21f982b3393f4575c4678

    • Size

      130KB

    • MD5

      9a61d6fcfca21f982b3393f4575c4678

    • SHA1

      aa017aa2784b1dbcd69fd02a2a390ee9de8ce376

    • SHA256

      9c3d1e9ddac080486e0211897439a141b11d895b5426f54beb9c2c7843214ebf

    • SHA512

      5337efb40a40f645eab8db0717eca5792745286b59fe5256e712460c5bafc7cdfbb408de74209054b825673a79f743164ab9ee706827e4fd9a47922ed9ae5a7d

    • SSDEEP

      3072:Z4GkT9NELcmIq85MSZXM/f7vVetJ8add9QzTsjxFELRWRg47KcX6GcgqBK:Z4lTj0AwH7vVetJ8addQmoWRg47KcXJH

    Score
    7/10

    • Changes its process name

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks