General

  • Target

    417101eccbfd908f3d8ca860e4f6486e

  • Size

    85KB

  • Sample

    231219-21415ahbhj

  • MD5

    417101eccbfd908f3d8ca860e4f6486e

  • SHA1

    c1743d69d42c28a982b518583e91b6d63b494007

  • SHA256

    17ecad35ba8157a4d4735f2f6faedf530e55af9743baa6b5af0753264cda6641

  • SHA512

    0119a95ecf8c76c62eb62176395a08560b55d642eb75db87f5aee21deb73f9577bd5cfec79206f49ee186c67b0690a803528f8f4dcf86e0788c6244bb2fcb045

  • SSDEEP

    1536:orqTLQO1I57Tj+nHxQOH/UewGRFUgMOTPiLSZIIQmZhqQ4b/Q0X1UX:VLjHpUSRlMOTzimZhqQ4bI0X1UX

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

138.197.5.39:23

Targets

    • Target

      417101eccbfd908f3d8ca860e4f6486e

    • Size

      85KB

    • MD5

      417101eccbfd908f3d8ca860e4f6486e

    • SHA1

      c1743d69d42c28a982b518583e91b6d63b494007

    • SHA256

      17ecad35ba8157a4d4735f2f6faedf530e55af9743baa6b5af0753264cda6641

    • SHA512

      0119a95ecf8c76c62eb62176395a08560b55d642eb75db87f5aee21deb73f9577bd5cfec79206f49ee186c67b0690a803528f8f4dcf86e0788c6244bb2fcb045

    • SSDEEP

      1536:orqTLQO1I57Tj+nHxQOH/UewGRFUgMOTPiLSZIIQmZhqQ4b/Q0X1UX:VLjHpUSRlMOTzimZhqQ4bI0X1UX

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks