General
-
Target
4b90485ad137dc3b4fcd16a546c3bb69
-
Size
115KB
-
Sample
231219-25vy1seah9
-
MD5
4b90485ad137dc3b4fcd16a546c3bb69
-
SHA1
265a02a3cf6a5d42c06bf8d2c7b8f70421ffe986
-
SHA256
ba9707c35c244e40c6f5d7cbbaa028bbefdba0904944797af05bcebc8f4f98af
-
SHA512
a2f8f11876a7efe7675523dfb42ad0649730ce4e358743043ad9d03f8270523020212217c01968b11709c3094f0bc7c25abb6ef590c7f22998ad1b642d511b87
-
SSDEEP
3072:SMIMbetZaIuxSP549D2XeAF5hadLQfRsIaLhFZeeDQbKY:Sc6aJYXeAF5hadORpaLhFZeeDQbKY
Behavioral task
behavioral1
Sample
4b90485ad137dc3b4fcd16a546c3bb69
Resource
ubuntu1804-amd64-20231215-en
Malware Config
Extracted
gafgyt
185.244.25.111:8888
Targets
-
-
Target
4b90485ad137dc3b4fcd16a546c3bb69
-
Size
115KB
-
MD5
4b90485ad137dc3b4fcd16a546c3bb69
-
SHA1
265a02a3cf6a5d42c06bf8d2c7b8f70421ffe986
-
SHA256
ba9707c35c244e40c6f5d7cbbaa028bbefdba0904944797af05bcebc8f4f98af
-
SHA512
a2f8f11876a7efe7675523dfb42ad0649730ce4e358743043ad9d03f8270523020212217c01968b11709c3094f0bc7c25abb6ef590c7f22998ad1b642d511b87
-
SSDEEP
3072:SMIMbetZaIuxSP549D2XeAF5hadLQfRsIaLhFZeeDQbKY:Sc6aJYXeAF5hadORpaLhFZeeDQbKY
Score9/10-
Contacts a large (23843) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Changes its process name
-