Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

0e39e0afdd...kes118

ubuntu-18.04-amd64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0e39e0afddd103d7fbcd5a2773c81b75_JaffaCakes118

  • Size

    70KB

  • Sample

    240502-mctg6aeg3y

  • MD5

    0e39e0afddd103d7fbcd5a2773c81b75

  • SHA1

    dc0d9b5f8d72b81ed4b448a913bc6e9e48c30df8

  • SHA256

    4a00adde88030551ffa2020495ff4d1c486a9907d1b0a4e0ff7bdbd88d8c3412

  • SHA512

    16f31b77cd7a6fe2c0a089912970c385e6235f8a5356942faa399293f7cb61fcbcf8de710be3c0fddd7e3d5a2887009e13215cda81d3920dc8ea3f21c8bf57a2

  • SSDEEP

    1536:fmY0aH/NQ27qLfEg8ZW0874ZPmF+lVOCjUxfg71:J0aH/C2GLfcsbMZPmElVOCAxfg71

Score
10/10
gafgytlinux

Malware Config

Extracted

Family

gafgyt

C2

104.168.57.119:23

Targets

    • Target

      0e39e0afddd103d7fbcd5a2773c81b75_JaffaCakes118

    • Size

      70KB

    • MD5

      0e39e0afddd103d7fbcd5a2773c81b75

    • SHA1

      dc0d9b5f8d72b81ed4b448a913bc6e9e48c30df8

    • SHA256

      4a00adde88030551ffa2020495ff4d1c486a9907d1b0a4e0ff7bdbd88d8c3412

    • SHA512

      16f31b77cd7a6fe2c0a089912970c385e6235f8a5356942faa399293f7cb61fcbcf8de710be3c0fddd7e3d5a2887009e13215cda81d3920dc8ea3f21c8bf57a2

    • SSDEEP

      1536:fmY0aH/NQ27qLfEg8ZW0874ZPmF+lVOCjUxfg71:J0aH/C2GLfcsbMZPmElVOCAxfg71

    Score
    6/10

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks