Overview

overview

10

Static

static

10

8074687f60...12988a

debian-9-mipsel

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    8074687f60a4d43be6002398a112988a

  • Size

    170KB

  • Sample

    231220-dxfblahhgq

  • MD5

    8074687f60a4d43be6002398a112988a

  • SHA1

    84ebd98fdb2dc347fffbda10080f1844fa5fffe8

  • SHA256

    9f361b0314630f23e711e73abf34356d130e437debacb35366d88bfe13d87dd6

  • SHA512

    228605416863617db6294044f5d748c1230b5c8cc137937a57e4b0913b3d7f6d213cae4d12b76d1c6bfe84033c2a2f1724228467f007f3099d17fbdebe5fab3b

  • SSDEEP

    3072:3q4HWDAsHIfZ6DyMvHqgSrldQnq2Z4c2bO:3q42rofkyOSrldQnq2Z4c2bO

Score
10/10
gafgyt

Malware Config

Targets

    • Target

      8074687f60a4d43be6002398a112988a

    • Size

      170KB

    • MD5

      8074687f60a4d43be6002398a112988a

    • SHA1

      84ebd98fdb2dc347fffbda10080f1844fa5fffe8

    • SHA256

      9f361b0314630f23e711e73abf34356d130e437debacb35366d88bfe13d87dd6

    • SHA512

      228605416863617db6294044f5d748c1230b5c8cc137937a57e4b0913b3d7f6d213cae4d12b76d1c6bfe84033c2a2f1724228467f007f3099d17fbdebe5fab3b

    • SSDEEP

      3072:3q4HWDAsHIfZ6DyMvHqgSrldQnq2Z4c2bO:3q42rofkyOSrldQnq2Z4c2bO

    Score
    7/10

    • Changes its process name

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks