Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    01e85bdb87d300acd5bc2893d9a73d96.elf

  • Size

    108KB

  • Sample

    231230-vp6x1sdca3

  • MD5

    01e85bdb87d300acd5bc2893d9a73d96

  • SHA1

    a0098a1136bc2799bdf3ddb3d1cbd3ea802c7c03

  • SHA256

    caeea18625d94f6a771925150a1b7ffe989a3d98cb69203d8c12e2b51a575789

  • SHA512

    5aaab77d8b7d7ff269d67ba3eda998d54cde64d9f1f1110f34d9cea027f7e7a02545cc1f0c1fc958caea09077b6957ebec7450fdf286fd3df7a371abf8bd59e0

  • SSDEEP

    3072:b6an17WtsWhdgYJe0D6mbPbmTQOWsXAOn:Wan17WPJe0D6ibmTQOWCAOn

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

78.135.81.84:839

Targets

    • Target

      01e85bdb87d300acd5bc2893d9a73d96.elf

    • Size

      108KB

    • MD5

      01e85bdb87d300acd5bc2893d9a73d96

    • SHA1

      a0098a1136bc2799bdf3ddb3d1cbd3ea802c7c03

    • SHA256

      caeea18625d94f6a771925150a1b7ffe989a3d98cb69203d8c12e2b51a575789

    • SHA512

      5aaab77d8b7d7ff269d67ba3eda998d54cde64d9f1f1110f34d9cea027f7e7a02545cc1f0c1fc958caea09077b6957ebec7450fdf286fd3df7a371abf8bd59e0

    • SSDEEP

      3072:b6an17WtsWhdgYJe0D6mbPbmTQOWsXAOn:Wan17WPJe0D6ibmTQOWCAOn

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks