Overview

overview

10

Static

static

10

5c8f2b0527...dddc52

debian-9-armhf

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5c8f2b05272a131055fc6384ffdddc52

  • Size

    152KB

  • Sample

    231219-3bycqadggl

  • MD5

    5c8f2b05272a131055fc6384ffdddc52

  • SHA1

    616d59fab5cfaa26aa981e58c4b1559aeeff0a8b

  • SHA256

    903a01e77c022de49a4b0caded85093d2738df1825c19decaedcedc8cd000829

  • SHA512

    38b525c21235391d0b13e589d273e8b239c2f089155af3967c4ef6542349d126966fbff8c6f6ced77fcc8ca52b9e4bd648f7ac9a8edd02805156a08a415bafd7

  • SSDEEP

    3072:yXTV17g6Cy++t/8teNSZJYbla+YaJJYD1yHpiT6rkPE9GmyOEQrCUEGT:2TBSZGbla+Ya9pimkPwGmyOEQrCUEGT

Score
10/10
gafgyt

Malware Config

Targets

    • Target

      5c8f2b05272a131055fc6384ffdddc52

    • Size

      152KB

    • MD5

      5c8f2b05272a131055fc6384ffdddc52

    • SHA1

      616d59fab5cfaa26aa981e58c4b1559aeeff0a8b

    • SHA256

      903a01e77c022de49a4b0caded85093d2738df1825c19decaedcedc8cd000829

    • SHA512

      38b525c21235391d0b13e589d273e8b239c2f089155af3967c4ef6542349d126966fbff8c6f6ced77fcc8ca52b9e4bd648f7ac9a8edd02805156a08a415bafd7

    • SSDEEP

      3072:yXTV17g6Cy++t/8teNSZJYbla+YaJJYD1yHpiT6rkPE9GmyOEQrCUEGT:2TBSZGbla+Ya9pimkPwGmyOEQrCUEGT

    Score
    7/10

    • Changes its process name

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks