Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

b67102d062...6b.elf

debian-9-armhf

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b67102d06208af0e95b933ace102606b.elf

  • Size

    126KB

  • Sample

    240107-h94beahgg5

  • MD5

    b67102d06208af0e95b933ace102606b

  • SHA1

    a717d42c8acc546976f85fcd2076f8b7077621f8

  • SHA256

    23d0db910afaf3f6e17f79fa929f637c1482cda00e3ad4bf0448e9535154bd6e

  • SHA512

    ca1242d84d30310af2ffc027cf7d46917bc05f798498cdc400c5288f5ab8d9414b3fce948fb18696145ef734840c795aaf0478d6a84a2ddb40618ff83c337b68

  • SSDEEP

    3072:6jVlyaL5JCrIpv04sIbttiEiTmP46aQyfPlfKsNb:yoCJCN4sIbHemP46aQyfPlfKsNb

Score
10/10
gafgyt

Malware Config

Targets

    • Target

      b67102d06208af0e95b933ace102606b.elf

    • Size

      126KB

    • MD5

      b67102d06208af0e95b933ace102606b

    • SHA1

      a717d42c8acc546976f85fcd2076f8b7077621f8

    • SHA256

      23d0db910afaf3f6e17f79fa929f637c1482cda00e3ad4bf0448e9535154bd6e

    • SHA512

      ca1242d84d30310af2ffc027cf7d46917bc05f798498cdc400c5288f5ab8d9414b3fce948fb18696145ef734840c795aaf0478d6a84a2ddb40618ff83c337b68

    • SSDEEP

      3072:6jVlyaL5JCrIpv04sIbttiEiTmP46aQyfPlfKsNb:yoCJCN4sIbHemP46aQyfPlfKsNb

    Score
    7/10

    • Changes its process name

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks