Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Behavioral task
behavioral1
Sample
ed326f0a7e07ee9cd9fc472d08b0d1b4b8bd08075eaa7b53a1c7a55c50dcfda4.elf
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral2
Sample
ed326f0a7e07ee9cd9fc472d08b0d1b4b8bd08075eaa7b53a1c7a55c50dcfda4.elf
Resource
debian9-armhf-20240611-en
Behavioral task
behavioral3
Sample
ed326f0a7e07ee9cd9fc472d08b0d1b4b8bd08075eaa7b53a1c7a55c50dcfda4.elf
Resource
debian9-mipsbe-20240611-en
Behavioral task
behavioral4
Sample
ed326f0a7e07ee9cd9fc472d08b0d1b4b8bd08075eaa7b53a1c7a55c50dcfda4.elf
Resource
debian9-mipsel-20240226-en
General
-
Target
0950c8ec59f79344ebdf0a95c274e243.bin
-
Size
42KB
-
MD5
693ea5cee8f8f9ea15f5063fb830b11b
-
SHA1
7b7b7ccf639ece6d554a3edbb4bb5ab5101fec71
-
SHA256
a4d0696559001afb870530b942e54d8b3330b381e6650f12ac2033fb6ed3b30d
-
SHA512
74b4c53383741a0887bdeaae2f019d5b5092df6a36f5e49ddb910c6cb20db33cb1f0d2b6c06b984cf5739f15970abcff2b662f11811e2e8af135cb190f36c9fb
-
SSDEEP
768:5Z5CyAfGixJMjCsE3DN3OuCgAKfGTLHljMqpcKO/mPRofovtspWUpWp:nwyAfGRzE3DN+uXrGHFjFo/4GfoipWB
Malware Config
Extracted
gafgyt
205.185.115.242:12345
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/ed326f0a7e07ee9cd9fc472d08b0d1b4b8bd08075eaa7b53a1c7a55c50dcfda4.elf family_gafgyt -
Gafgyt family
Files
-
0950c8ec59f79344ebdf0a95c274e243.bin.zip
Password: infected
-
ed326f0a7e07ee9cd9fc472d08b0d1b4b8bd08075eaa7b53a1c7a55c50dcfda4.elf.elf linux sh