General

  • Target

    565b633cd5330f443db0f9e5cca571ea

  • Size

    102KB

  • Sample

    231219-29p9bsfgh3

  • MD5

    565b633cd5330f443db0f9e5cca571ea

  • SHA1

    0c5e9eba2acf920951a09004984a593ba64a2183

  • SHA256

    1d6a2e2d8ab72db8adba579853cb69ef526a9e207e6d426afc5bc65a1b24d89d

  • SHA512

    d25de4568f831939e48d5501fd277302632a7ecfecd8f9403628f1906de525b1df8c2e57f8933891dd0d16bd845f511eefc5a5645625d1f2e730708b01b681a7

  • SSDEEP

    1536:N3KHGSwdGSEmsLT68OfR6tALg0+O/uvGiPs6as3puCjX4nmCzrQAFWfPKkKe:AwxKL+TgjGiPlzjXYmCzrQAFwPKkKe

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

178.33.181.19:850

Targets

    • Target

      565b633cd5330f443db0f9e5cca571ea

    • Size

      102KB

    • MD5

      565b633cd5330f443db0f9e5cca571ea

    • SHA1

      0c5e9eba2acf920951a09004984a593ba64a2183

    • SHA256

      1d6a2e2d8ab72db8adba579853cb69ef526a9e207e6d426afc5bc65a1b24d89d

    • SHA512

      d25de4568f831939e48d5501fd277302632a7ecfecd8f9403628f1906de525b1df8c2e57f8933891dd0d16bd845f511eefc5a5645625d1f2e730708b01b681a7

    • SSDEEP

      1536:N3KHGSwdGSEmsLT68OfR6tALg0+O/uvGiPs6as3puCjX4nmCzrQAFWfPKkKe:AwxKL+TgjGiPlzjXYmCzrQAFwPKkKe

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks