Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    4679962e0c99acd96f4cff8202be192d.bin

  • Size

    45KB

  • Sample

    240709-bt52qsygrr

  • MD5

    6b932b65fcf3a52e172228d61d8d1cb0

  • SHA1

    bc72955acb3379037dc7c10fdd7fe9b24c12c3ab

  • SHA256

    1addb1136f8b548d7177d6d909578ec37d2a6919f55fafc19a79fd67569615a8

  • SHA512

    83072f5ea7fb8eda3dc376003a66c24742256a66e4ff582a6949d96d78a33d13644dd08239ae8d77f8a8334409236da952544d3a60c7a174242699a93e072413

  • SSDEEP

    768:8RnbNOuZP30d8RJLq55/ApkQYAJc2n+vg2OMxwfRjcFQ4NJM6Ce3m4xU1rOPy0A:8RnbNFvHjLq55/MzZZuTjNCe3mG+Wy0A

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

38.58.177.229:4258

Targets

    • Target

      4cafa99c027f975a92fc5ba5c17a625c5e5fa45440165673c69e18b353200764.elf

    • Size

      106KB

    • MD5

      4679962e0c99acd96f4cff8202be192d

    • SHA1

      d997ad64149d48d44b67e0ba600dc95593fd05f5

    • SHA256

      4cafa99c027f975a92fc5ba5c17a625c5e5fa45440165673c69e18b353200764

    • SHA512

      b2e7f6ac9170a26878240980c2af49e5cb31abc0c733681df1ca378353a9af11ab156a908e62cf05b3c97d3b39ff18efbbd7fe06f79559ded8fd41d4990b7d22

    • SSDEEP

      3072:j6dye4BmJQ/phaZw/1vc4+AzkSXmdRWaLHgb4:d/phaZchrmdRWaDgb4

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks