Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    107211d9d71209393415e939a909a9fc.elf

  • Size

    139KB

  • Sample

    240427-j9j37sfc7w

  • MD5

    107211d9d71209393415e939a909a9fc

  • SHA1

    50fc9abad722cd3778568b73e58a40f4dbffa15b

  • SHA256

    77ccead74b1a3a309fa6c6a6cb4cf271dcfc5a79b9be53c37829ee53fd5a8b51

  • SHA512

    5c07bb2bc5a695f23e39ad8cbcb2234b63da5063fc64c129382fcb88c9222e7488818bc40f28d92a0bf07e8b89c53f51c10b427c9f9aed0303758948bff9c6cd

  • SSDEEP

    3072:yclx0/BSAMipV3SwwaY5zjk5h6Naqb0mJswdytNr9:y3tD3wjk5hv7mJswdytNr9

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

45.88.90.17:4444

Targets

    • Target

      107211d9d71209393415e939a909a9fc.elf

    • Size

      139KB

    • MD5

      107211d9d71209393415e939a909a9fc

    • SHA1

      50fc9abad722cd3778568b73e58a40f4dbffa15b

    • SHA256

      77ccead74b1a3a309fa6c6a6cb4cf271dcfc5a79b9be53c37829ee53fd5a8b51

    • SHA512

      5c07bb2bc5a695f23e39ad8cbcb2234b63da5063fc64c129382fcb88c9222e7488818bc40f28d92a0bf07e8b89c53f51c10b427c9f9aed0303758948bff9c6cd

    • SSDEEP

      3072:yclx0/BSAMipV3SwwaY5zjk5h6Naqb0mJswdytNr9:y3tD3wjk5hv7mJswdytNr9

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks