General

  • Target

    77cd54165ec256b8d53e94556aca3e2a

  • Size

    147KB

  • Sample

    231220-blk2ladhan

  • MD5

    77cd54165ec256b8d53e94556aca3e2a

  • SHA1

    a39935c4c1e3a9941215e7c35911a6243c56f361

  • SHA256

    d1f1ab3eb7f8f624fa2f4ca4343639261c8d4a238e0ce45baaf9ccb8dce0fe83

  • SHA512

    adc208495285daf76966788f8d0a9aebda2c81c19640af504187efba3f498b80dff39697d9e1ccbb06eae22bb43abcf088c906febe7207d3d7fd61b823635d71

  • SSDEEP

    3072:DXWVJs6gdEUAlau36qaO7QFQ+H/W4EVh7mLwfCDQSAW:jWVJs7d5AlaBzO7QFDH/W77mLwfCESAW

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

165.22.130.136:999

Targets

    • Target

      77cd54165ec256b8d53e94556aca3e2a

    • Size

      147KB

    • MD5

      77cd54165ec256b8d53e94556aca3e2a

    • SHA1

      a39935c4c1e3a9941215e7c35911a6243c56f361

    • SHA256

      d1f1ab3eb7f8f624fa2f4ca4343639261c8d4a238e0ce45baaf9ccb8dce0fe83

    • SHA512

      adc208495285daf76966788f8d0a9aebda2c81c19640af504187efba3f498b80dff39697d9e1ccbb06eae22bb43abcf088c906febe7207d3d7fd61b823635d71

    • SSDEEP

      3072:DXWVJs6gdEUAlau36qaO7QFQ+H/W4EVh7mLwfCDQSAW:jWVJs7d5AlaBzO7QFDH/W77mLwfCESAW

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks