General

  • Target

    022e744c68cb443cd33a2c9278d899c9

  • Size

    116KB

  • Sample

    231219-196qmsegaj

  • MD5

    022e744c68cb443cd33a2c9278d899c9

  • SHA1

    5e231b22652b755450258464591c6216a34f3815

  • SHA256

    6b9bf7adfe50a9b88917e30915d79e917a5e0e8c7bed1556a40f73b2e92a9be3

  • SHA512

    a5fb58c79df67e4e05c807071431d1f31edbed8f2d70e8e8975cb95112326debf5dfdbe67bf5300a2595311be31c1befc1e4b7f663d6d3b821e0efffd116cff4

  • SSDEEP

    3072:KGR1eOtJ8AAWS8oJMetJ8au49QuTsSjTAeDvgXBtcZkG7gyqc:KoyxIoJMetJ8au4llf5gXBtcZn7gyqc

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

167.99.189.242:1749

Targets

    • Target

      022e744c68cb443cd33a2c9278d899c9

    • Size

      116KB

    • MD5

      022e744c68cb443cd33a2c9278d899c9

    • SHA1

      5e231b22652b755450258464591c6216a34f3815

    • SHA256

      6b9bf7adfe50a9b88917e30915d79e917a5e0e8c7bed1556a40f73b2e92a9be3

    • SHA512

      a5fb58c79df67e4e05c807071431d1f31edbed8f2d70e8e8975cb95112326debf5dfdbe67bf5300a2595311be31c1befc1e4b7f663d6d3b821e0efffd116cff4

    • SSDEEP

      3072:KGR1eOtJ8AAWS8oJMetJ8au49QuTsSjTAeDvgXBtcZkG7gyqc:KoyxIoJMetJ8au4llf5gXBtcZn7gyqc

    Score
    7/10
    • Changes its process name

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks