General

  • Target

    6b62c0d842fa3bd105735ad1838c326c

  • Size

    184KB

  • Sample

    231219-3he5qabcd4

  • MD5

    6b62c0d842fa3bd105735ad1838c326c

  • SHA1

    9b1ccf77955d77785c45ba1e573b8b25012f9a23

  • SHA256

    15178e916f7daab367af7083f4fc121c432a40e15b3d0787007d7bd6c49403df

  • SHA512

    3e300d8c06ffcb118253e0b7e4324d912ac8b445b55b9b2eaf28ff00aa725c05c259192d9980ce0e93ccfdebbebbc5afe4dbd0f0095e1930295e9d6749b0283a

  • SSDEEP

    3072:XWn4fGXq11zXqwL5SKNZf1t3aLUUGPNCibtNf8eNgJs12Ohvc5PsEsEUxxQLgJlE:X6hvUB89hObA5QXoO5Dt0DR1M4X

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

80.211.167.8:23

Targets

    • Target

      6b62c0d842fa3bd105735ad1838c326c

    • Size

      184KB

    • MD5

      6b62c0d842fa3bd105735ad1838c326c

    • SHA1

      9b1ccf77955d77785c45ba1e573b8b25012f9a23

    • SHA256

      15178e916f7daab367af7083f4fc121c432a40e15b3d0787007d7bd6c49403df

    • SHA512

      3e300d8c06ffcb118253e0b7e4324d912ac8b445b55b9b2eaf28ff00aa725c05c259192d9980ce0e93ccfdebbebbc5afe4dbd0f0095e1930295e9d6749b0283a

    • SSDEEP

      3072:XWn4fGXq11zXqwL5SKNZf1t3aLUUGPNCibtNf8eNgJs12Ohvc5PsEsEUxxQLgJlE:X6hvUB89hObA5QXoO5Dt0DR1M4X

    Score
    7/10
    • Changes its process name

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks