Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Behavioral task
behavioral1
Sample
fc7c954dbcc44830d87599ce3d0be7ef947bd3b59ef1d3d22fef2d107a043f12.elf
Resource
debian9-mipsbe-20240611-en
0 signatures
150 seconds
General
-
Target
14d080085e07550462ad99c044f9a528.bin
-
Size
42KB
-
MD5
13bbf53c2b926492066913e06660e6b5
-
SHA1
0d45171fcc44a210da1564b6550e95f1d5d6d8b9
-
SHA256
726a98fd8b1de9d1cc3af807dbd1e6823e08f1b9013cbef74c4e9cf0754c9a03
-
SHA512
2fb1304b1f3c6500f07007ab3c0939ffc1dae9a6daeb49a7c09d96664036153a50c8365a1636cc06bce5c9c222b0856209a775955dcec061fc1852564146a706
-
SSDEEP
768:V0a5eYAQHHqfC1hnxzuA3I4y696i/lMhkkR7uQ+9Nze4clk+9C12NuhCCOpd:HYYAQnqfCJ6H4y696i/lMZub98xUcM8n
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
205.185.115.242:12345
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/fc7c954dbcc44830d87599ce3d0be7ef947bd3b59ef1d3d22fef2d107a043f12.elf family_gafgyt -
Gafgyt family
Files
-
14d080085e07550462ad99c044f9a528.bin.zip
Password: infected
-
fc7c954dbcc44830d87599ce3d0be7ef947bd3b59ef1d3d22fef2d107a043f12.elf.elf linux mipsbe