Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    eea8db3922e23eacd76996f9b03d003d_JaffaCakes118

  • Size

    1.1MB

  • Sample

    240920-3nvscsvbrd

  • MD5

    eea8db3922e23eacd76996f9b03d003d

  • SHA1

    38f226c5c9f55db65e22d2088a880a7dc8c20fc5

  • SHA256

    42da321b7c061f064b8367998edfad492aa35426d37b2d355138a5ddeb076e23

  • SHA512

    129cbf8ad482d327c5f60546220dc4c8cb021a2bd4ea1341303f39b287d967b1e59bdcc6ff69fa6bec3495065bcce3c63a59c5c3c179a33e5cb7c6ec07e97500

  • SSDEEP

    24576:bRLbsvvUtJ8aeCmpbeoTi7j0Pk7BhFbEKQeLgxstcZn7gyqc:Q9v

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

167.99.215.155:777

Targets

    • Target

      eea8db3922e23eacd76996f9b03d003d_JaffaCakes118

    • Size

      1.1MB

    • MD5

      eea8db3922e23eacd76996f9b03d003d

    • SHA1

      38f226c5c9f55db65e22d2088a880a7dc8c20fc5

    • SHA256

      42da321b7c061f064b8367998edfad492aa35426d37b2d355138a5ddeb076e23

    • SHA512

      129cbf8ad482d327c5f60546220dc4c8cb021a2bd4ea1341303f39b287d967b1e59bdcc6ff69fa6bec3495065bcce3c63a59c5c3c179a33e5cb7c6ec07e97500

    • SSDEEP

      24576:bRLbsvvUtJ8aeCmpbeoTi7j0Pk7BhFbEKQeLgxstcZn7gyqc:Q9v

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks