Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Behavioral task
behavioral1
Sample
25ceec04a5cf918ad59f0d1d8d2ef69055a7892352a4c1b465ae27ecb8458a15.elf
Resource
debian9-mipsel-20240226-en
1 signatures
150 seconds
General
-
Target
0d4d497d8b7eddd453db9f7e7425a13d.bin
-
Size
48KB
-
MD5
547106764c905182aa2b86cf297e4033
-
SHA1
9d8c8c8738cc0fd933d1f13106c01724262c93d3
-
SHA256
e20a27638c320cf2908d8020b3a57ae837a8ca39a97151f822fef42a1d95583d
-
SHA512
14c28b1587c47b4d1dbf2cec32f05b71187a41ce26582fd2f9aa6ef40ab2a14b5a4833170c289e001b1566afe41a6a78651fc4cfe34c5f16a9848e13515bff18
-
SSDEEP
768:jFCC3mO5RUZIhrKL5irpy0qGO1LOIz/3Wzxpr/NCUoOML3lzV+/qB5yhtj1SfVI6:jFCCi5iFPqGM/WzDr/Mn+/oCB1R+z
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
93.123.85.119:23
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/25ceec04a5cf918ad59f0d1d8d2ef69055a7892352a4c1b465ae27ecb8458a15.elf family_gafgyt -
Gafgyt family
Files
-
0d4d497d8b7eddd453db9f7e7425a13d.bin.zip
Password: infected
-
25ceec04a5cf918ad59f0d1d8d2ef69055a7892352a4c1b465ae27ecb8458a15.elf.elf linux mipsel