General

  • Target

    7e37f643d61ec17d73dc52ab68cee3b5

  • Size

    171KB

  • Sample

    231220-c7e8xagggk

  • MD5

    7e37f643d61ec17d73dc52ab68cee3b5

  • SHA1

    5a1bfa1bf764f3a4e7a5a1610b5167d85e28d9f5

  • SHA256

    37a641f09de86c5f7979c51b2a772837c25cf891dc4831248c13ccf6f990fa40

  • SHA512

    069901bcad1b6480f8339860a060ee27724ee2655582d30fa5a995c23ee858d2022e7717f34964b49466a124c47e8f20651b8c28d7c2333d6c3fc23c98125183

  • SSDEEP

    3072:652nom9NCJqCKvqoE45zM5NCUXAyBlTZ8OpqPQmPOLVPU8oJDHX:q6TC45z+vlmOpklPOLVPU8oJDHX

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

178.62.250.233:2545

Targets

    • Target

      7e37f643d61ec17d73dc52ab68cee3b5

    • Size

      171KB

    • MD5

      7e37f643d61ec17d73dc52ab68cee3b5

    • SHA1

      5a1bfa1bf764f3a4e7a5a1610b5167d85e28d9f5

    • SHA256

      37a641f09de86c5f7979c51b2a772837c25cf891dc4831248c13ccf6f990fa40

    • SHA512

      069901bcad1b6480f8339860a060ee27724ee2655582d30fa5a995c23ee858d2022e7717f34964b49466a124c47e8f20651b8c28d7c2333d6c3fc23c98125183

    • SSDEEP

      3072:652nom9NCJqCKvqoE45zM5NCUXAyBlTZ8OpqPQmPOLVPU8oJDHX:q6TC45z+vlmOpklPOLVPU8oJDHX

    Score
    7/10
    • Changes its process name

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks