General

  • Target

    08ab89a00e432754416e9fce8bb27e9f

  • Size

    114KB

  • Sample

    231219-2ck84sfgdn

  • MD5

    08ab89a00e432754416e9fce8bb27e9f

  • SHA1

    4565c39c178b1212b9bac93d17a7b7673d2c0b0b

  • SHA256

    9cc695828ad16035b6ac2f7bfd26f7dcd6f81feeb767e95223b924fea003458f

  • SHA512

    78bfe32e2cc0b0f982911f8d1f7b3baf00c64ae5d9a8bc9f4db0201060c0ac40afc111e3083cf74f763ad4754775676dfe72a1a595476b429fa8fb033c706315

  • SSDEEP

    3072:LrE+QNgfnq0Oul73e2az0mW+XFBStUWwv:LHQNgfqk62az0mW+XFBStUWwv

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

198.98.52.167:444

Targets

    • Target

      08ab89a00e432754416e9fce8bb27e9f

    • Size

      114KB

    • MD5

      08ab89a00e432754416e9fce8bb27e9f

    • SHA1

      4565c39c178b1212b9bac93d17a7b7673d2c0b0b

    • SHA256

      9cc695828ad16035b6ac2f7bfd26f7dcd6f81feeb767e95223b924fea003458f

    • SHA512

      78bfe32e2cc0b0f982911f8d1f7b3baf00c64ae5d9a8bc9f4db0201060c0ac40afc111e3083cf74f763ad4754775676dfe72a1a595476b429fa8fb033c706315

    • SSDEEP

      3072:LrE+QNgfnq0Oul73e2az0mW+XFBStUWwv:LHQNgfqk62az0mW+XFBStUWwv

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks