Overview

overview

10

Static

static

10

6af90ab94f...4dfa97

debian-9-armhf

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6af90ab94f72c8160f9ed40b134dfa97

  • Size

    152KB

  • Sample

    231219-3g9ypsgcfl

  • MD5

    6af90ab94f72c8160f9ed40b134dfa97

  • SHA1

    f18321354f21573dfd23a0dbfbd1d599458487e7

  • SHA256

    0e24797cee3f9b2417d3d3afbb25b733415196f5c801d4c1f91f7a95788fe086

  • SHA512

    c8a80bc269383227970379f65026160c9ec382a2cf3fba168408f490832237787df280eba4474fe36d849345defc68125396c668a97d3648f0d93a4f5438813f

  • SSDEEP

    3072:zbm17g6Cy++t/8tebW7ZQYK9aFUSJhYTNyvtqU60aPNMGmyOEQrCUEGT:HeW7ZzK9aFUS1tqOaPCGmyOEQrCUEGT

Score
10/10
gafgyt

Malware Config

Targets

    • Target

      6af90ab94f72c8160f9ed40b134dfa97

    • Size

      152KB

    • MD5

      6af90ab94f72c8160f9ed40b134dfa97

    • SHA1

      f18321354f21573dfd23a0dbfbd1d599458487e7

    • SHA256

      0e24797cee3f9b2417d3d3afbb25b733415196f5c801d4c1f91f7a95788fe086

    • SHA512

      c8a80bc269383227970379f65026160c9ec382a2cf3fba168408f490832237787df280eba4474fe36d849345defc68125396c668a97d3648f0d93a4f5438813f

    • SSDEEP

      3072:zbm17g6Cy++t/8tebW7ZQYK9aFUSJhYTNyvtqU60aPNMGmyOEQrCUEGT:HeW7ZzK9aFUS1tqOaPCGmyOEQrCUEGT

    Score
    7/10

    • Changes its process name

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks