General

  • Target

    3b0fad7f8279dbf7a956ada6fe4ad6c2

  • Size

    163KB

  • Sample

    231219-2yr9jsgbej

  • MD5

    3b0fad7f8279dbf7a956ada6fe4ad6c2

  • SHA1

    0cabb82407a921796687f07c8a719d1c9d6a92cd

  • SHA256

    5369eb479a754955e600fd2d38583fca0074ea219b00b4980febfc62a4fad43f

  • SHA512

    9f8585793b4b61a7b5f2bd507dc79bd68dda6b15753eea39b12faf1ba0bc9a22dc21ee9847983457d3fe8b8b9757d9021ce5a8df72ac2b4f1e77284951f8a735

  • SSDEEP

    1536:pzhRi+eTI2h0VT/626aPdDJ113jy+bdZbVkP9k8ZbBZZoOIGg1w/s7R5W+DfUJSj:pzhR1j3j1bdobxRcwsRHDfUJSnv55+q9

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

167.114.115.119:87

Targets

    • Target

      3b0fad7f8279dbf7a956ada6fe4ad6c2

    • Size

      163KB

    • MD5

      3b0fad7f8279dbf7a956ada6fe4ad6c2

    • SHA1

      0cabb82407a921796687f07c8a719d1c9d6a92cd

    • SHA256

      5369eb479a754955e600fd2d38583fca0074ea219b00b4980febfc62a4fad43f

    • SHA512

      9f8585793b4b61a7b5f2bd507dc79bd68dda6b15753eea39b12faf1ba0bc9a22dc21ee9847983457d3fe8b8b9757d9021ce5a8df72ac2b4f1e77284951f8a735

    • SSDEEP

      1536:pzhRi+eTI2h0VT/626aPdDJ113jy+bdZbVkP9k8ZbBZZoOIGg1w/s7R5W+DfUJSj:pzhR1j3j1bdobxRcwsRHDfUJSnv55+q9

    Score
    9/10
    • Contacts a large (23037) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Changes its process name

MITRE ATT&CK Enterprise v15

Tasks