Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

23d0db910a...6e.elf

debian-9-armhf

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b67102d06208af0e95b933ace102606b.bin

  • Size

    50KB

  • Sample

    240109-dthmjsdehl

  • MD5

    0a082a7b2b467aad624e382741ce6082

  • SHA1

    80861c3e481e5b219eaf692b6318312e23592c34

  • SHA256

    40eae4b605958107ac56ca73bd9fc2aa552bf8312409e221176fb4214c8de6e2

  • SHA512

    88643e284e7892f4ac76dcb9c22fe2fe47f7cf93c8dee014195d7f6aee9433c29916e317ad9512b1d880bab01ace032f61c157e2078ce28a61a1d6010ea2b52a

  • SSDEEP

    768:QiujzuKhbHs/+sG2fWvQg/DdoXB4v22vBq1VobBurzNr5B8rJFHJLLKZzbX:LEhbHsGQ+vVDdoM225QVAczNr5BqTF4X

Score
10/10
gafgyt

Malware Config

Targets

    • Target

      23d0db910afaf3f6e17f79fa929f637c1482cda00e3ad4bf0448e9535154bd6e.elf

    • Size

      126KB

    • MD5

      b67102d06208af0e95b933ace102606b

    • SHA1

      a717d42c8acc546976f85fcd2076f8b7077621f8

    • SHA256

      23d0db910afaf3f6e17f79fa929f637c1482cda00e3ad4bf0448e9535154bd6e

    • SHA512

      ca1242d84d30310af2ffc027cf7d46917bc05f798498cdc400c5288f5ab8d9414b3fce948fb18696145ef734840c795aaf0478d6a84a2ddb40618ff83c337b68

    • SSDEEP

      3072:6jVlyaL5JCrIpv04sIbttiEiTmP46aQyfPlfKsNb:yoCJCN4sIbHemP46aQyfPlfKsNb

    Score
    7/10

    • Changes its process name

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks