Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    7738607b44b9501df5e4eb4023d63e4b5211ad8f18ab7ff2279e4e888e4c5046.elf

  • Size

    194KB

  • Sample

    250219-e8gt8sxlez

  • MD5

    5ac94efd402e550349e1fcf36ef0f407

  • SHA1

    fc0d373abe708b4f81c458f3ffcca27182199ec1

  • SHA256

    7738607b44b9501df5e4eb4023d63e4b5211ad8f18ab7ff2279e4e888e4c5046

  • SHA512

    954f0bdc125d6f582f8257925d0f0ecb0625df1ac4ae39ec9e3a8a525729fe3384afbc8060445278ab4fd25a5680675a3b8b7a74d599477c3dcc3b00e6474c58

  • SSDEEP

    3072:h1gYl3Cq7l/5irjNMG9hp/qxV5MEal2TmmXtcnSFSs67:r3WjhpizNTmmXtcnSFSs67

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

84.200.154.119:4567

Targets

    • Target

      7738607b44b9501df5e4eb4023d63e4b5211ad8f18ab7ff2279e4e888e4c5046.elf

    • Size

      194KB

    • MD5

      5ac94efd402e550349e1fcf36ef0f407

    • SHA1

      fc0d373abe708b4f81c458f3ffcca27182199ec1

    • SHA256

      7738607b44b9501df5e4eb4023d63e4b5211ad8f18ab7ff2279e4e888e4c5046

    • SHA512

      954f0bdc125d6f582f8257925d0f0ecb0625df1ac4ae39ec9e3a8a525729fe3384afbc8060445278ab4fd25a5680675a3b8b7a74d599477c3dcc3b00e6474c58

    • SSDEEP

      3072:h1gYl3Cq7l/5irjNMG9hp/qxV5MEal2TmmXtcnSFSs67:r3WjhpizNTmmXtcnSFSs67

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks