General

  • Target

    503ed7b12ca5edbfff746c5e65d48472

  • Size

    78KB

  • Sample

    231219-27gt6sehb3

  • MD5

    503ed7b12ca5edbfff746c5e65d48472

  • SHA1

    d4cb9b4db6d2694b037a25ce5c905eef2b570562

  • SHA256

    c90a2f92695e949ec81e5fdca2eb6c5359c9556405decbd657a0ed18150aeabe

  • SHA512

    50c366adcfe34589a3942d171dfa8ef73a95780032f89a5c383c93c90e0306fbd2afc8e4eea55a471a06a4a3cef0fa1dd7ae5bd4777843d549bb236f077cea46

  • SSDEEP

    1536:qoJk9t5sPrPVj6WH0NnpV0ksvKwwOEReg4BsKhWH88V66666flm8E1V8zlimP+lJ:Ot5sPrPVj6WH0NpqvzwOEReh0cZlI7m2

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

205.185.124.211:12

Targets

    • Target

      503ed7b12ca5edbfff746c5e65d48472

    • Size

      78KB

    • MD5

      503ed7b12ca5edbfff746c5e65d48472

    • SHA1

      d4cb9b4db6d2694b037a25ce5c905eef2b570562

    • SHA256

      c90a2f92695e949ec81e5fdca2eb6c5359c9556405decbd657a0ed18150aeabe

    • SHA512

      50c366adcfe34589a3942d171dfa8ef73a95780032f89a5c383c93c90e0306fbd2afc8e4eea55a471a06a4a3cef0fa1dd7ae5bd4777843d549bb236f077cea46

    • SSDEEP

      1536:qoJk9t5sPrPVj6WH0NnpV0ksvKwwOEReg4BsKhWH88V66666flm8E1V8zlimP+lJ:Ot5sPrPVj6WH0NpqvzwOEReh0cZlI7m2

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks