Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

hidakibest.arm4.elf

debian-9-armhf

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    hidakibest.arm4.elf

  • Size

    112KB

  • Sample

    240715-f7pzwstakh

  • MD5

    9a1f7a90686a1654ab41adce564bfdc2

  • SHA1

    759c2e45e17ccc86776d07217864732ed3151ba8

  • SHA256

    5c1e65e574dbd7bc7eb63a4fcc1df4a15cc4e85251fed1b8a8d3b55234072b83

  • SHA512

    09363739fd1bb0cfc34cecb613f78f01ceec64f08a6f84a994ffcbb06f664ad88df22d51aec64c32d5252b283587d47be8af4866ca2703fadfb8f59c7bfd14b6

  • SSDEEP

    3072:vhfviOui5FCRSUaVejY68tZ5hqSr3hGm0Qxu1bXWIn:pvfUQVejYXtZ5hqSr3hGm0Qxu1rWIn

Score
10/10
gafgyt

Malware Config

Extracted

Family

gafgyt

C2

212.80.18.246:4258

Targets

    • Target

      hidakibest.arm4.elf

    • Size

      112KB

    • MD5

      9a1f7a90686a1654ab41adce564bfdc2

    • SHA1

      759c2e45e17ccc86776d07217864732ed3151ba8

    • SHA256

      5c1e65e574dbd7bc7eb63a4fcc1df4a15cc4e85251fed1b8a8d3b55234072b83

    • SHA512

      09363739fd1bb0cfc34cecb613f78f01ceec64f08a6f84a994ffcbb06f664ad88df22d51aec64c32d5252b283587d47be8af4866ca2703fadfb8f59c7bfd14b6

    • SSDEEP

      3072:vhfviOui5FCRSUaVejY68tZ5hqSr3hGm0Qxu1bXWIn:pvfUQVejYXtZ5hqSr3hGm0Qxu1rWIn

    Score
    6/10

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks