Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

19c652797b...kes118

ubuntu-20.04-amd64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    19c652797b9ab861d57790c37550c21a_JaffaCakes118

  • Size

    91KB

  • Sample

    240329-f8nhfsbe63

  • MD5

    19c652797b9ab861d57790c37550c21a

  • SHA1

    272deb3b27bf5ef63cecb74a55f4e328399df66c

  • SHA256

    d32f9e5c6d70f6a0dfa92f5e4ebe2d28afcb79e336f37215adae62770324310d

  • SHA512

    d4bff869cc41ee4b1f81abc772df5063dc4623a1549c95dd76d970aa23103ae235a3e99adfacec9bd5bee0d6979e4dbe25d0e25ea1287972c1c724cbff998d35

  • SSDEEP

    1536:p7rHXokXsWFVSzkfLEkZAT5ipG5v3SphauH/SPNlDDUg6I9um2Xj5YZb0e:pcCPOkfQfNipGdSphaE/AVog99um2XFY

Score
10/10
gafgytlinux

Malware Config

Extracted

Family

gafgyt

C2

178.62.253.153:4258

Targets

    • Target

      19c652797b9ab861d57790c37550c21a_JaffaCakes118

    • Size

      91KB

    • MD5

      19c652797b9ab861d57790c37550c21a

    • SHA1

      272deb3b27bf5ef63cecb74a55f4e328399df66c

    • SHA256

      d32f9e5c6d70f6a0dfa92f5e4ebe2d28afcb79e336f37215adae62770324310d

    • SHA512

      d4bff869cc41ee4b1f81abc772df5063dc4623a1549c95dd76d970aa23103ae235a3e99adfacec9bd5bee0d6979e4dbe25d0e25ea1287972c1c724cbff998d35

    • SSDEEP

      1536:p7rHXokXsWFVSzkfLEkZAT5ipG5v3SphauH/SPNlDDUg6I9um2Xj5YZb0e:pcCPOkfQfNipGdSphaE/AVog99um2XFY

    Score
    6/10

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks