General

  • Target

    05d61c9bbe5b4583df5b6667cfe592d3

  • Size

    139KB

  • Sample

    231219-2bh3csaea6

  • MD5

    05d61c9bbe5b4583df5b6667cfe592d3

  • SHA1

    5b1efa9bc07977a2a389f17ee8eebf62c3daafff

  • SHA256

    74d7703f63149de82ff6f6f584f23ffe694242014a12c922f959097bf8da70cc

  • SHA512

    aec0727152e9195c2abe0b5ddd096136f90ba294ac23db7445300c212263bea232477e954256f7cb5f3737edbb752ab1cb5f53c7fc75d4e3aa06a3575d3a3a26

  • SSDEEP

    3072:/wQUAsPbw0U2dCsJfx/x9/IZ8erIfJCBGEDHziH90PcZsatph1:3st7RRjIZ8eaCwE/iH90PcZsatph1

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

167.88.124.204:132

Targets

    • Target

      05d61c9bbe5b4583df5b6667cfe592d3

    • Size

      139KB

    • MD5

      05d61c9bbe5b4583df5b6667cfe592d3

    • SHA1

      5b1efa9bc07977a2a389f17ee8eebf62c3daafff

    • SHA256

      74d7703f63149de82ff6f6f584f23ffe694242014a12c922f959097bf8da70cc

    • SHA512

      aec0727152e9195c2abe0b5ddd096136f90ba294ac23db7445300c212263bea232477e954256f7cb5f3737edbb752ab1cb5f53c7fc75d4e3aa06a3575d3a3a26

    • SSDEEP

      3072:/wQUAsPbw0U2dCsJfx/x9/IZ8erIfJCBGEDHziH90PcZsatph1:3st7RRjIZ8eaCwE/iH90PcZsatph1

    Score
    7/10
    • Changes its process name

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks