Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    a0ced2d69daab13334bddecce0495cc0.elf

  • Size

    91KB

  • Sample

    240107-xtnncacagn

  • MD5

    a0ced2d69daab13334bddecce0495cc0

  • SHA1

    c0cbeff6c83347f98b623e52452c639244e8ef09

  • SHA256

    e56fcff4510773a0e0fdfa5864aeb04d3dc2f385c806413f918e439783dd46db

  • SHA512

    fe02fe15b13f64b59eeb1a67205f2c29c1a1fbeb3f3b5bbfa97e49437a347c51a675af6727caabb524ab10ebf7063961884497d3eb10f95b146a7bfe6f7d20e3

  • SSDEEP

    1536:p7rHXokXsWFVSzkfLEkZAT5ipG5v3sphauH/jPNlDDUg6I9um2Xj5YZb0e:pcCPOkfQfNipGdsphaE/JVog99um2XFY

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

107.172.168.143:4258

Targets

    • Target

      a0ced2d69daab13334bddecce0495cc0.elf

    • Size

      91KB

    • MD5

      a0ced2d69daab13334bddecce0495cc0

    • SHA1

      c0cbeff6c83347f98b623e52452c639244e8ef09

    • SHA256

      e56fcff4510773a0e0fdfa5864aeb04d3dc2f385c806413f918e439783dd46db

    • SHA512

      fe02fe15b13f64b59eeb1a67205f2c29c1a1fbeb3f3b5bbfa97e49437a347c51a675af6727caabb524ab10ebf7063961884497d3eb10f95b146a7bfe6f7d20e3

    • SSDEEP

      1536:p7rHXokXsWFVSzkfLEkZAT5ipG5v3sphauH/jPNlDDUg6I9um2Xj5YZb0e:pcCPOkfQfNipGdsphaE/JVog99um2XFY

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks