Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    x86.elf

  • Size

    127KB

  • Sample

    250218-xwqkqawndl

  • MD5

    6490534077986eacdf5b0c5d8e7b3ad0

  • SHA1

    d2df89d1ef2a86df58c57f489a5efcb80fdea840

  • SHA256

    a90fa3c9213b835866a288ab034f54238293ba2777150044bf2929c77fd7b6ab

  • SHA512

    002b310a063e8471620cd8f2788a6571954d1a23d3ab8cede6f46c3eb4d4162423d9218b65bfd05bbd68285c128f6ee5b50ddebe3b7c8fa361e4b64005ced848

  • SSDEEP

    3072:WXP7vkp29g9zZHlSNCtVmptH9n3U4BkX0qmIhPBHwqW:Wvkpr96pHcfmIhPhwqW

Malware Config

Extracted

Family

gafgyt

C2

209.141.57.97:23

Targets

    • Target

      x86.elf

    • Size

      127KB

    • MD5

      6490534077986eacdf5b0c5d8e7b3ad0

    • SHA1

      d2df89d1ef2a86df58c57f489a5efcb80fdea840

    • SHA256

      a90fa3c9213b835866a288ab034f54238293ba2777150044bf2929c77fd7b6ab

    • SHA512

      002b310a063e8471620cd8f2788a6571954d1a23d3ab8cede6f46c3eb4d4162423d9218b65bfd05bbd68285c128f6ee5b50ddebe3b7c8fa361e4b64005ced848

    • SSDEEP

      3072:WXP7vkp29g9zZHlSNCtVmptH9n3U4BkX0qmIhPBHwqW:Wvkpr96pHcfmIhPhwqW

    Score
    7/10
    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

MITRE ATT&CK Enterprise v15

Tasks