General

  • Target

    146e9fcb6c9643a440a817edb0e15932

  • Size

    203KB

  • Sample

    231219-2g9r9schd4

  • MD5

    146e9fcb6c9643a440a817edb0e15932

  • SHA1

    cf77c3d267e1aec0e91124c82a6769f1b54ded65

  • SHA256

    2b91214062dfcb01c55e034c5001304c1b4b85e9c9a128d97c9f23dcead8d412

  • SHA512

    ee8fffc8915c2758668b8a95961f01da63fd75bea6af5b400c10b40f4cd45ebd3154f655451ed974a03f77e8d8130cbf7cafea34fcae49caed6e00685fb039c4

  • SSDEEP

    3072:9FNQgm+tjhMElms3ttPmbZ2FrdpmhmsPP4Rp:LNYAtFmbZUzmhmsPP4Rp

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

185.62.190.159:1336

Targets

    • Target

      146e9fcb6c9643a440a817edb0e15932

    • Size

      203KB

    • MD5

      146e9fcb6c9643a440a817edb0e15932

    • SHA1

      cf77c3d267e1aec0e91124c82a6769f1b54ded65

    • SHA256

      2b91214062dfcb01c55e034c5001304c1b4b85e9c9a128d97c9f23dcead8d412

    • SHA512

      ee8fffc8915c2758668b8a95961f01da63fd75bea6af5b400c10b40f4cd45ebd3154f655451ed974a03f77e8d8130cbf7cafea34fcae49caed6e00685fb039c4

    • SSDEEP

      3072:9FNQgm+tjhMElms3ttPmbZ2FrdpmhmsPP4Rp:LNYAtFmbZUzmhmsPP4Rp

    Score
    7/10
    • Changes its process name

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks