General

  • Target

    1072a0fe5bf4682a5cd00c9dc17ef626

  • Size

    148KB

  • Sample

    231219-2frkashahk

  • MD5

    1072a0fe5bf4682a5cd00c9dc17ef626

  • SHA1

    ab8844d31386c605f662bd009377b40e58e5f461

  • SHA256

    971ae56605a588d7daa2f6c0c9c529d56a2e97a13cdb8a12bbe704cbddb46bfb

  • SHA512

    16fa245ff9d3f40bc60d1e13411158613d25797186caf25f59ac7bb7b9bc2d981f7f4d1e58eda0fbb160d45574573067b2720fb7bac2844e2438780f98f70993

  • SSDEEP

    3072:HE9rx5elUUrxUVVpSE8JqMsOltGDalhupRwWriH90PfNatph1:MxPaEx9MzlSekiH90PfNatph1

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

188.227.19.18:812

Targets

    • Target

      1072a0fe5bf4682a5cd00c9dc17ef626

    • Size

      148KB

    • MD5

      1072a0fe5bf4682a5cd00c9dc17ef626

    • SHA1

      ab8844d31386c605f662bd009377b40e58e5f461

    • SHA256

      971ae56605a588d7daa2f6c0c9c529d56a2e97a13cdb8a12bbe704cbddb46bfb

    • SHA512

      16fa245ff9d3f40bc60d1e13411158613d25797186caf25f59ac7bb7b9bc2d981f7f4d1e58eda0fbb160d45574573067b2720fb7bac2844e2438780f98f70993

    • SSDEEP

      3072:HE9rx5elUUrxUVVpSE8JqMsOltGDalhupRwWriH90PfNatph1:MxPaEx9MzlSekiH90PfNatph1

    Score
    7/10
    • Changes its process name

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks