Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    armv6l.elf

  • Size

    118KB

  • Sample

    241216-ng5lnazjcr

  • MD5

    6822322b70497ee511faf0b4e0566ca8

  • SHA1

    d0e5d87159d8e52bd3bc9adbc0d5a52a778b04a0

  • SHA256

    a1ea13c20b5ee7da35f527d958c426672d13a5cc207b889da2c08cbaeb04ec12

  • SHA512

    80527f400ca2e8fc143c450b8fd681e3baa4261d0c21185784af9976da02690ae2966101f82f6994825ce5b78aba6e721c592627456c8d8e46b60210565b3d97

  • SSDEEP

    3072:WkYPgPggnAb0JWaY/VfVEDx0dn+mTQOY5NX3cn:lYPgPggI4Wa8VEDW+mTQOY5R3cn

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

150.241.88.132:25565

Targets

    • Target

      armv6l.elf

    • Size

      118KB

    • MD5

      6822322b70497ee511faf0b4e0566ca8

    • SHA1

      d0e5d87159d8e52bd3bc9adbc0d5a52a778b04a0

    • SHA256

      a1ea13c20b5ee7da35f527d958c426672d13a5cc207b889da2c08cbaeb04ec12

    • SHA512

      80527f400ca2e8fc143c450b8fd681e3baa4261d0c21185784af9976da02690ae2966101f82f6994825ce5b78aba6e721c592627456c8d8e46b60210565b3d97

    • SSDEEP

      3072:WkYPgPggnAb0JWaY/VfVEDx0dn+mTQOY5NX3cn:lYPgPggI4Wa8VEDW+mTQOY5R3cn

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.