Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    0c5bdfa48acd9becc745a810e36d4fc3_JaffaCakes118

  • Size

    70KB

  • Sample

    240501-vnt7tsea84

  • MD5

    0c5bdfa48acd9becc745a810e36d4fc3

  • SHA1

    5ac4c7381dd70f71694d830fd09ae04d635b65e3

  • SHA256

    df94a06743ac354deb2fe6c326d48eb1d996ef238bf2f5c2b3d0f6fcda54b02c

  • SHA512

    f9f7140f9038a06c01655141c63a278fa91c0913a556060b14783c739780ed9a76679705a3c1e2faea1300095b0ff6c667c48a327e578a144c1456795270a86f

  • SSDEEP

    1536:2jZjdD/smTdD8IDa4k+SY6ThBg572Nl1M7U7YSmd+lVOCsUxfg71:2jVdDBoetkXFBgCBMqDmMlVOCVxfg71

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

139.59.41.236:666

Targets

    • Target

      0c5bdfa48acd9becc745a810e36d4fc3_JaffaCakes118

    • Size

      70KB

    • MD5

      0c5bdfa48acd9becc745a810e36d4fc3

    • SHA1

      5ac4c7381dd70f71694d830fd09ae04d635b65e3

    • SHA256

      df94a06743ac354deb2fe6c326d48eb1d996ef238bf2f5c2b3d0f6fcda54b02c

    • SHA512

      f9f7140f9038a06c01655141c63a278fa91c0913a556060b14783c739780ed9a76679705a3c1e2faea1300095b0ff6c667c48a327e578a144c1456795270a86f

    • SSDEEP

      1536:2jZjdD/smTdD8IDa4k+SY6ThBg572Nl1M7U7YSmd+lVOCsUxfg71:2jVdDBoetkXFBgCBMqDmMlVOCVxfg71

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks