Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

9bf5d66391...98bc39

debian-9-armhf

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9bf5d6639195bfd4936cbbc6c398bc39

  • Size

    127KB

  • Sample

    231220-lbqt7saca8

  • MD5

    9bf5d6639195bfd4936cbbc6c398bc39

  • SHA1

    d3460d00902a7c51590e3039f99479c130adef6f

  • SHA256

    a68aa7988b60414ed0ed536ff553bc09dfb6d4bb5767487045cdfaa0fd86f5b4

  • SHA512

    5328b350261be162117a5d3c9db7756b1745429f473a2ca4341575b2e8d40dd508c178465369af7065ce63fd06c6422220799aee4ed9d0da059b7ad514dc680b

  • SSDEEP

    3072:4SdcECL4GHmQCSLU4sV8aUDzO3mNcvzOg8/Ywm3qnwmyLQ0v8XEtB:iLnsuaOXcvzOBnwmyLQ0vyEtB

Score
10/10
gafgyt

Malware Config

Extracted

Family

gafgyt

C2

139.59.11.206:666

Targets

    • Target

      9bf5d6639195bfd4936cbbc6c398bc39

    • Size

      127KB

    • MD5

      9bf5d6639195bfd4936cbbc6c398bc39

    • SHA1

      d3460d00902a7c51590e3039f99479c130adef6f

    • SHA256

      a68aa7988b60414ed0ed536ff553bc09dfb6d4bb5767487045cdfaa0fd86f5b4

    • SHA512

      5328b350261be162117a5d3c9db7756b1745429f473a2ca4341575b2e8d40dd508c178465369af7065ce63fd06c6422220799aee4ed9d0da059b7ad514dc680b

    • SSDEEP

      3072:4SdcECL4GHmQCSLU4sV8aUDzO3mNcvzOg8/Ywm3qnwmyLQ0v8XEtB:iLnsuaOXcvzOBnwmyLQ0vyEtB

    Score
    7/10

    • Changes its process name

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks