Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    x-8.6-.Sakura.elf

  • Size

    92KB

  • Sample

    250218-x3gamaxjaq

  • MD5

    cd3083795e82e94e9f12349e5e0f308e

  • SHA1

    da31faa030e36a3d66e36025d5f9bd90da168795

  • SHA256

    5f93cde41bf79ff93865979d26497fade27d144095d4c0f6d4016e156c4699b7

  • SHA512

    40a13cb82f1fd5cfea6c2bb5b368af82deb783c414cc1b86dfa771d57845e7c7f1c91a605235871e3bc4f90ed7acabb5a22e48006fa61448d5a6cacc1e3d546e

  • SSDEEP

    1536:W7uJtxNeVE8zV7aDlvhE1hmkJ0S36W6bWjK3LyPXfH0mA+KWOXFseaZYxe:4SsVEeVMlpmXJ0O6WpjKbifUm/KWOXFE

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

87.251.79.180:12345

Targets

    • Target

      x-8.6-.Sakura.elf

    • Size

      92KB

    • MD5

      cd3083795e82e94e9f12349e5e0f308e

    • SHA1

      da31faa030e36a3d66e36025d5f9bd90da168795

    • SHA256

      5f93cde41bf79ff93865979d26497fade27d144095d4c0f6d4016e156c4699b7

    • SHA512

      40a13cb82f1fd5cfea6c2bb5b368af82deb783c414cc1b86dfa771d57845e7c7f1c91a605235871e3bc4f90ed7acabb5a22e48006fa61448d5a6cacc1e3d546e

    • SSDEEP

      1536:W7uJtxNeVE8zV7aDlvhE1hmkJ0S36W6bWjK3LyPXfH0mA+KWOXFseaZYxe:4SsVEeVMlpmXJ0O6WpjKbifUm/KWOXFE

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks