General

  • Target

    74a50e984ef94014f58ad99e5c7e4336

  • Size

    143KB

  • Sample

    231220-arh9hsehh4

  • MD5

    74a50e984ef94014f58ad99e5c7e4336

  • SHA1

    196d433a5d7007b3687e396bc41a7fd6ed7d9834

  • SHA256

    4b6a02ec3d3e9779d80b8468a9eaef6c51dfd754147dcb0c92b1deb423d0f309

  • SHA512

    e698aaf56e7ef87981f5ecf08578948bf606b1a288943d9837f6aba8065aaf67f4ad258e13d02b574e8aa12b0bed5d2bca53b2ea2ba45d8748497819e0acd036

  • SSDEEP

    3072:2t8wd9Jb+mWMZv+SsW0btDDX+e/n0o8e7XH90PcZsatph1:uZd3amAfNDX+e/n77XH90PcZsatph1

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

107.182.225.125:23

Targets

    • Target

      74a50e984ef94014f58ad99e5c7e4336

    • Size

      143KB

    • MD5

      74a50e984ef94014f58ad99e5c7e4336

    • SHA1

      196d433a5d7007b3687e396bc41a7fd6ed7d9834

    • SHA256

      4b6a02ec3d3e9779d80b8468a9eaef6c51dfd754147dcb0c92b1deb423d0f309

    • SHA512

      e698aaf56e7ef87981f5ecf08578948bf606b1a288943d9837f6aba8065aaf67f4ad258e13d02b574e8aa12b0bed5d2bca53b2ea2ba45d8748497819e0acd036

    • SSDEEP

      3072:2t8wd9Jb+mWMZv+SsW0btDDX+e/n0o8e7XH90PcZsatph1:uZd3amAfNDX+e/n77XH90PcZsatph1

    Score
    7/10
    • Changes its process name

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks