General

  • Target

    21204fdd9a9ffcf6817152d2653d812a

  • Size

    146KB

  • Sample

    231219-2m519sbggr

  • MD5

    21204fdd9a9ffcf6817152d2653d812a

  • SHA1

    90aab00bd6388636bd00c95484e564e8118baef7

  • SHA256

    f783002c90169e10f0ef57d6663f625313750caf92e88a036b2b5d4dce1967e7

  • SHA512

    76f47b87ca53269024560d49673c0d0518bc28436922b9b00ea6e1b3865db243d7e977405533035c762b8881603ecdbc0a496e5619cd44bbdba3a4e8b0bf6f04

  • SSDEEP

    3072:7ej+B7rWGgUNQaQc5e2q+7L8buxVylZWmLwfCDQSAW:qj+B7aGpNQaxTq+7L8axV4ZWmLwfCESj

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

185.112.248.29:7777

Targets

    • Target

      21204fdd9a9ffcf6817152d2653d812a

    • Size

      146KB

    • MD5

      21204fdd9a9ffcf6817152d2653d812a

    • SHA1

      90aab00bd6388636bd00c95484e564e8118baef7

    • SHA256

      f783002c90169e10f0ef57d6663f625313750caf92e88a036b2b5d4dce1967e7

    • SHA512

      76f47b87ca53269024560d49673c0d0518bc28436922b9b00ea6e1b3865db243d7e977405533035c762b8881603ecdbc0a496e5619cd44bbdba3a4e8b0bf6f04

    • SSDEEP

      3072:7ej+B7rWGgUNQaQc5e2q+7L8buxVylZWmLwfCDQSAW:qj+B7aGpNQaxTq+7L8axV4ZWmLwfCESj

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks